Description
Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for attackers to conduct bridge hijacking attacks by predicting a value.
Unscored
CVE-2015-8320
EUVD-2015-8204GHSA-87x6-r7ff-7gv7
Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for attackers to conduc…
Published Nov 23, 2015 · Updated Aug 6, 2024 · Assigned by redhat