Vulnerability Description
An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Java Software Development Kit | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106966Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0729PatchVendor Advisory
- http://www.securityfocus.com/bid/106966Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0729PatchVendor Advisory
FAQ
What is CVE-2019-0729?
CVE-2019-0729 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption, allowing an attacker to predict the randomness of the key, aka 'Azure IoT Java SDK...
How severe is CVE-2019-0729?
CVE-2019-0729 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-0729?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Java Software Development Kit.