You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@slider.apache.org by "Gour Saha (JIRA)" <ji...@apache.org> on 2017/09/08 23:06:00 UTC

[jira] [Created] (SLIDER-1248) Insecure random number generator

Gour Saha created SLIDER-1248:
---------------------------------

             Summary: Insecure random number generator
                 Key: SLIDER-1248
                 URL: https://issues.apache.org/jira/browse/SLIDER-1248
             Project: Slider
          Issue Type: Bug
          Components: core, security
    Affects Versions: Slider 0.92
            Reporter: Gour Saha


The random number generator implemented by randomAlphanumeric() in AggregateConf.java and SecurityUtils.java cannot withstand a cryptographic attack. SecureRandom is recommended.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)