CVE-2024-45719

—

CVSS 3.1

2.6 low

EPSS

<1%p16

Published

Nov 22, 2024 (Nov 22, 2024)

Modified

Jun 17, 2026

Description

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.0. The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable. Users are recommended to upgrade to version 1.4.1, which fixes the issue.

Vendors: apache
Products: answer
Weakness: CWE-326
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.