Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ratpack 安全特征问题漏洞
Vulnerability Description
Ratpack是一款用于构建可扩展HTTP应用程序的Java库。 Ratpack 1.6.1之前版本中存在安全漏洞。攻击者可通过确定服务器小窗口的启动时间并获取一个会话ID值利用该漏洞确定会话IDs序列。
CVSS Information
N/A
Vulnerability Type
N/A