CVE Feed

    Dashboard / CVE / CVE-2022-29035

    CVE-2022-29035

    In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations

    Published:Apr 11, 2022
    Last Modified:Nov 21, 2024
    EPS:Apr 11, 2022
    EPSS Score:0.00003
    CVSS Score:3.3

    Affected Products

    Vendor
    Jetbrains
    Product
    Ktor

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-68762 (CVSS 5.9) — In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible…
    CVE-2025-29904 (CVSS 5.3) — In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible…
    CVE-2024-49580 (CVSS 5.3) — In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclo…
    CVE-2023-45613 (CVSS 6.8) — In JetBrains Ktor before 2.3.5 server certificates were not verified…
    CVE-2023-45612 (CVSS 8.6) — In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to X…
    CVE-2023-34339 (CVSS 3.3) — In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's messag…
    CVE-2022-48476 (CVSS 7.5) — In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible …
    CVE-2022-38180 (CVSS 5.3) — In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases…
    CVE-2022-38179 (CVSS 4.7) — JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack…
    CVE-2022-29930 (CVSS 8.7) — SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor v…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High