{"id":"EUVD-2020-0358","revision":"07fefdeacbb24895b826ae2a4bd85742","records":[{"revision":"07fefdeacbb24895b826ae2a4bd85742","observedAt":"2026-11-09T16:14:51.486+00:00","statement":{"source":"euvd","id":"EUVD-2020-0358","aliases":["CVE-2015-8851","GHSA-265q-28rp-chq5"],"title":"node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.","description":"node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","score":7.5,"severity":null}],"references":["https://github.com/broofa/node-uuid/commit/672f3834ed02c798aa021c618d0a5666c8da000d","https://nodesecurity.io/advisories/93","http://www.openwall.com/lists/oss-security/2016/04/13/8","https://bugzilla.redhat.com/show_bug.cgi?id=1327056"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-0358","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jan 30, 2020, 8:43:26 PM","dateUpdated":"Oct 7, 2026, 8:07:29 PM"},"relatedAdvisories":[{"id":"RHBA-2016:1343","title":"Red Hat Bug Fix Advisory: Red Hat OpenShift Enterprise 3.2.1.1 bug fix and enhancement update","vulnerabilityIds":["CVE-2015-8851"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2020-0358","identifiers":["EUVD-2020-0358","CVE-2015-8851","GHSA-265q-28rp-chq5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}