Vulnerability in Cyber-domain-ontology Cdo-utility-local-uuid
CVE-2024-22194
cdo-local-uuid project provides a specialized UUID-generating function that can, on user request, cause a program to generate deterministic UUIDs. An information leakage vulnerability is present in `cdo-local-uuid` at version `0.4.0`, and…
EPSS: 0.000 (9.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.2 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N.
Affected products
- Cyber-domain-ontology Cdo-utility-local-uuid — versions = 0.4.0, = 0.5.0, = 0.6.0
Weakness classification (CWE)
References
- https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/security/advisories/GHSA-rgrf-6mf5-m882 (x_refsource_CONFIRM)
- https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/3 (x_refsource_MISC)
- https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/pull/4 (x_refsource_MISC)
- https://github.com/Cyber-Domain-Ontology/CDO-Utility-Local-UUID/commit/9e78f7cb1075728d0aafc918514f32a1392cd235 (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/00864cd12de7c50d882dd1a74915d32e939c25f9 (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/1cccae8eb3cf94b3a28f6490efa0fbf5c82ebd6b (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/5acb929dfb599709d1c8c90d1824dd79e0fd9e10 (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/7e02d18383eabbeb9fb4ec97d81438c9980a4790 (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/80551f49241c874c7c50e14abe05c5017630dad2 (x_refsource_MISC)
- https://github.com/casework/CASE-Utilities-Python/commit/939775f956796d0432ecabbf62782ed7ad1007b5 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-22194?
- CVE-2024-22194 is a low-severity vulnerability in Cyber-domain-ontology Cdo-utility-local-uuid, classified under Insertion of Sensitive Information Into Debugging Code. CVSS score: 2.2/10. Published 2024-01-11.
- How severe is CVE-2024-22194?
- Low severity. CVSS v3 base score is 2.2 out of 10.