51 lines
791 B
JSON
51 lines
791 B
JSON
{
|
|
"title": "Using pseudorandom number generators (PRNGs) is security-sensitive",
|
|
"type": "SECURITY_HOTSPOT",
|
|
"code": {
|
|
"impacts": {
|
|
"SECURITY": "HIGH"
|
|
},
|
|
"attribute": "TRUSTWORTHY"
|
|
},
|
|
"status": "ready",
|
|
"remediation": {
|
|
"func": "Constant\/Issue",
|
|
"constantCost": "10min"
|
|
},
|
|
"tags": [
|
|
"cwe"
|
|
],
|
|
"extra": {
|
|
"replacementRules": [
|
|
|
|
],
|
|
"legacyKeys": [
|
|
|
|
]
|
|
},
|
|
"defaultSeverity": "Critical",
|
|
"ruleSpecification": "RSPEC-2245",
|
|
"sqKey": "S2245",
|
|
"scope": "Main",
|
|
"securityStandards": {
|
|
"CWE": [
|
|
326,
|
|
330,
|
|
338,
|
|
1241
|
|
],
|
|
"OWASP": [
|
|
"A3"
|
|
],
|
|
"OWASP Top 10 2021": [
|
|
"A2"
|
|
],
|
|
"ASVS 4.0": [
|
|
"6.2.4"
|
|
]
|
|
},
|
|
"defaultQualityProfiles": [
|
|
"Sonar way"
|
|
]
|
|
}
|