yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
The device uses an algorithm that is predictable and generates a pseudo-random number.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Yii | Yiiframework | 2.0.0 (including) | 2.0.43 (excluding) |
Pseudo-random number generator algorithms are predictable because their registers have a finite number of possible states, which eventually lead to repeating patterns. As a result, pseudo-random number generators (PRNGs) can compromise their randomness or expose their internal state to various attacks, such as reverse engineering or tampering.