Details

      Description

      The class com.liferay.util.PwdGenerator is using the method Math.random() to generate password.
      Math.random() shouldn't be used in a security context. Instead, the class SecureRandom should be used.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  7 years, 22 weeks, 3 days ago

                  Packages

                  Version Package
                  6.1.X EE
                  6.2.0 CE M2