{"id":"EUVD-2020-0358","enisaUuid":"2136f0ca-76fd-388c-a3fd-0a12d4c045f4","description":"node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.","datePublished":"Jan 30, 2020, 8:43:26 PM","dateUpdated":"Oct 7, 2026, 8:07:29 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d\nhttps://nodesecurity.io/advisories/93\nhttp://www.openwall.com/lists/oss-security/2016/04/13/8\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d1327056\n","aliases":"CVE-2015-8851\nGHSA-265q-28rp-chq5\n","assigner":"redhat","epss":2.26,"enisaIdProduct":[{"id":"51d55880-56d7-3d34-af5b-bcea8cb0ec95","product":{"name":"node-uuid","vendor":{"name":"node-uuid"}},"product_version":"before 1.4.4"}],"enisaIdVendor":[{"id":"f2c18304-d89d-3dcc-89e7-cad997fdecaf","vendor":{"name":"node-uuid"}}],"enisaIdVulnerability":[{"id":"1c10cd78-53c7-35e9-96ac-e0b3c16a63b8","vulnerability":{"id":"GHSA-265q-28rp-chq5","description":"Insecure Entropy Source - Math.random() in node-uuid","datePublished":"Apr 16, 2020, 3:14:50 AM","dateUpdated":"Aug 23, 2021, 3:25:55 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2015-8851\nhttps://github.com/broofa/node-uuid/issues/108\nhttps://github.com/broofa/node-uuid/issues/122\nhttps://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d1327056\nhttps://www.npmjs.com/advisories/93\nhttp://www.openwall.com/lists/oss-security/2016/04/13/8\n","enisa_id":"EUVD-2020-0358\n","aliases":"GHSA-265q-28rp-chq5\nCVE-2015-8851\n","epss":0.0,"dataProcessed":"Apr 26, 2026, 1:42:32 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6e54a9c2-a56d-397d-b940-2fbabc3e3c83","vulnerability":{"id":"CVE-2015-8851","description":"node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.","datePublished":"Jan 30, 2020, 8:43:26 PM","dateUpdated":"Oct 7, 2026, 8:07:29 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d\nhttps://nodesecurity.io/advisories/93\nhttp://www.openwall.com/lists/oss-security/2016/04/13/8\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d1327056\n","enisa_id":"EUVD-2020-0358\n","assigner":"redhat","epss":2.26,"dataProcessed":"Nov 5, 2026, 7:20:09 AM","vulnerabilityProduct":[{"id":"70df6bb0-50a8-3435-b6a6-e511e62a2e82","product":{"name":"node-uuid","vendor":{"name":"node-uuid"}},"product_version":"before 1.4.4"}],"vulnerabilityVendor":[{"id":"407c9bd7-c421-3fe8-8fec-6e03b5739ed0","vendor":{"name":"node-uuid"}}]}}],"enisaIdAdvisory":[{"id":"e24dd2d0-3ca6-31e5-9f13-bef8bdf51ed0","advisory":{"id":"RHBA-2016:1343","description":"Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 3.2.1.1 bug fix and enhancement update","summary":"Red Hat OpenShift Enterprise release 3.2.1.1 is now available with updates to packages and images that fix several bugs and introduce feature enhancements.","datePublished":"Jun 27, 2016, 3:04:04 PM","dateUpdated":"Oct 7, 2026, 11:31:27 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHBA-2016:1343\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2016/rhba-2016_1343.json\n","aliases":"CVE-2015-8851\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"01e6c5cb-4f83-386b-bbd0-191ee775c5ce","product":{"name":"atomic-openshift-dockerregistry-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"05524e00-b6bc-3432-be57-4db28d67cad7","product":{"name":"heapster-0:1.1.0-1.beta2.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"05cc392a-f9a7-3df4-9084-d50d7e304cac","product":{"name":"atomic-openshift-node-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"32c9ce94-6a75-3fc6-8377-3aef7583ff15","product":{"name":"tuned-profiles-atomic-openshift-node-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"3ce958c2-b36c-3d32-854c-74f432ad496b","product":{"name":"atomic-openshift-0:3.2.1.1-1.git.0.96f9555.el7.src","vendor":{"name":"Red Hat"}}},{"id":"57c57457-73fb-314d-8498-88eda83b928e","product":{"name":"heapster-0:1.1.0-1.beta2.el7.src","vendor":{"name":"Red Hat"}}},{"id":"68694128-dd64-326c-a1c5-3465f4f87e5b","product":{"name":"atomic-openshift-recycle-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"84e65e7a-600b-39e9-8306-50fe4270c630","product":{"name":"atomic-openshift-clients-redistributable-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"8a2275c6-82e4-3938-a46b-b72ed9e094ef","product":{"name":"atomic-openshift-tests-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"93829b35-d871-3ad6-a85c-01f76d1f0114","product":{"name":"atomic-openshift-sdn-ovs-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"9ff38e5a-65e4-3e24-9e40-a99791f8b91a","product":{"name":"atomic-openshift-master-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"c03bbfc5-2cc8-36bc-b68f-fd4ce94308fe","product":{"name":"atomic-openshift-pod-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"d54058aa-fc1a-3c78-8dbc-4f10259abb4a","product":{"name":"atomic-openshift-clients-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}},{"id":"ee72bdd6-3b9d-37b5-b571-8532203c5573","product":{"name":"Red Hat OpenShift Container Platform 3.2","vendor":{"name":"Red Hat"}}},{"id":"fc3c30ed-61e3-3349-99cd-53bf6002ab08","product":{"name":"atomic-openshift-0:3.2.1.1-1.git.0.96f9555.el7.x86_64","vendor":{"name":"Red Hat"}}}]}}]}