Security Risk Category

weak-randomness Security Risks

Published vulnerability pages connected to weak-randomness. One risk can appear in multiple categories while keeping one canonical page.

weak-randomness risks

Showing 1 of 1 published risks.

highEPSS 0.002

BOSH Windows Stemcell Builder Weak Random Password Vulnerability

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.

CVE-2026-47831cloud-foundryboshwindows-stemcellweak-randomness

Updated Jul 10, 2026