Skip to content

Commit 012434b

Browse files
museljhRasmusWL
andauthored
Update python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql
Co-authored-by: Rasmus Wriedt Larsen <[email protected]>
1 parent a600218 commit 012434b

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
/**
22
* @name Insecure randomness
3-
* @description Using insufficient randomness as the key of a cryptographic algorithm can allow an attacker to compromise security.
3+
* @description Using a cryptographically weak pseudo-random number generator to generate a
4+
* security-sensitive value may allow an attacker to predict what value will
5+
* be generated.
46
* @kind path-problem
57
* @problem.severity warning
68
* @security-severity 7.8

0 commit comments

Comments
 (0)