CVE-2018-16115

{"id": "CVE-2018-16115", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "published": "2018-08-29T22:29:00.230", "references": [{"url": "https://doc.akka.io/docs/akka/current/security/2018-08-29-aes-rng.html", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-338"}]}], "descriptions": [{"lang": "en", "value": "Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Akka allows configuration of custom random number generators. For historical reasons, Akka included the AES128CounterSecureRNG and AES256CounterSecureRNG random number generators. The implementations had a bug that caused the generated numbers to be repeated after only a few bytes. The custom RNG implementations were not configured by default but examples in the documentation showed (and therefore implicitly recommended) using the custom ones. This can be used by an attacker to compromise the communication if these random number generators are enabled in configuration. It would be possible to eavesdrop, replay, or modify the messages sent with Akka Remoting/Cluster."}, {"lang": "es", "value": "Lightbend Akka en versiones 2.5.x anteriores a la 2.5.16 permite la revelaci\u00f3n y modificaci\u00f3n de mensajes debido a un error de RNG. Se emplea un generador de n\u00fameros aleatorios en Akka Remoting for TLS (tanto en la versi\u00f3n cl\u00e1sica como en Artery Remoting). Akka permite la configuraci\u00f3n de generadores de n\u00fameros aleatorios personalizados. Por motivos hist\u00f3ricos, Akka inclu\u00eda los generadores de n\u00fameros aleatorios AES128CounterSecureRNG y AES256CounterSecureRNG. Las implementaciones ten\u00edan un error que provocaba que los n\u00fameros generados se repitiesen tras solo unos pocos bytes. Las implementaciones RGN personalizadas no estaban configuradas por defecto, pero los ejemplos de la documentaci\u00f3n mostraban (y, por lo tanto, recomendaban impl\u00edcitamente) el uso de las implementaciones personalizadas. Esto puede ser empleado por un atacante para comprometer la comunicaci\u00f3n si estos generadores de n\u00fameros aleatorios est\u00e1n habilitados en la configuraci\u00f3n. Ser\u00eda posible escuchar, reproducir o modificar los mensajes enviados con Akka Remoting/Cluster."}], "lastModified": "2018-11-08T19:40:26.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lightbend:akka:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "750FA7F7-AE65-419D-BAEC-7CEBDC46E1B9", "versionEndExcluding": "2.5.16", "versionStartIncluding": "2.5.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}