Looking for the vulnerability index of Invicti's legacy products?
Insecure usage of Version 1 UUID/GUID - Vulnerability Database

Insecure usage of Version 1 UUID/GUID

Description

A UUID (Universal Unique Identifier) also known as GUID is a 128-bit value used to uniquely identify an object or entity on the internet. This web application is using Version 1 UUIDs.

Version 1 UUIDs are generated in a predictable manner based on:

  • The current time
  • A randomly generated "clock sequence" which remains constant between GUIDs during the uptime of the generating system
  • A "node ID", which is generated based on the system's MAC address if it is available

Remediation

Replace <strong>Version 1 UUIDs</strong> with <strong>Version 4 UUIDs</strong>.

Related Vulnerabilities