You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@commons.apache.org by "Gilles (JIRA)" <ji...@apache.org> on 2014/12/26 15:46:13 UTC
[jira] [Updated] (MATH-1183) BUG - Use of a Broken or Risky
Cryptographic Algorithm - RandomDataGenerator.java
[ https://issues.apache.org/jira/browse/MATH-1183?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gilles updated MATH-1183:
-------------------------
Priority: Minor (was: Major)
Fix Version/s: (was: 3.3)
Remaining Estimate: (was: 1h)
Original Estimate: (was: 1h)
Please be more specific, starting with line numbers that refer to the development version: Commons Math v3.4 will be available shortly and we do not have the resources to handle older releases.
What is broken?
Which algorithm is risky?
> BUG - Use of a Broken or Risky Cryptographic Algorithm - RandomDataGenerator.java
> ---------------------------------------------------------------------------------
>
> Key: MATH-1183
> URL: https://issues.apache.org/jira/browse/MATH-1183
> Project: Commons Math
> Issue Type: Bug
> Affects Versions: 3.3
> Reporter: David Camilo Espitia Manrique
> Priority: Minor
>
> We are currently using Commons-math3-3.3 and in the analysis for veracode, found this bug in these class:
> 1. RandomDataGenerator (Line 285)
> Description:
> The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the disclosure of
> sensitive information
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)