CVE-2022-0828
N/A
N/A
Summary
The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the download.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Download Manager | 0 < 3.2.34 | affected |
Weaknesses
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.