Approved changes feed: RSS · Atom

cpe:2.3:a:netflix:lemur:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetflix (f1ee56ff-77ab-5372-890c-4c8d187c3b7c)
ProductLemur (8df732ea-7bf6-5eab-a2ea-148daad5df48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/netflix/lemur purl2cpe 2026-06-01 10:14:04.669413

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30797 vulnerable 2026-06-08 06:04:41.169053 Insecure Random Generation in Netflix Lemur
HIGH (7.5)
Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacker to guess the credentials and gain access to resources managed by Lemur.
Published: 2023-04-19T19:10:12.523Z
Updated: 2025-11-21T16:10:24.442Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.