AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-10755

MEDIUM · CVSS 4.9 EPSS 1.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-09-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-10755
Severity
MEDIUM
CVSS
4.9
EPSS
1.13%
Apache Java

Original NVD Description

The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml.