high7.5
CVE-2024-25407
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request.
Impact
SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attackers to cause a Denial of Service (DoS) by using the predicted transaction ID's to terminate other transactions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steve-Community | Steve | Version 3.6.0 |