Description

A UUID (Universal Unique Identifier) also known as GUID is a 128-bit value used to uniquely identify an object or entity on the internet. This web application is using Version 1 UUIDs.

Version 1 UUIDs are generated in a predictable manner based on:

  • The current time
  • A randomly generated "clock sequence" which remains constant between GUIDs during the uptime of the generating system
  • A "node ID", which is generated based on the system's MAC address if it is available

Remediation

Replace Version 1 UUIDs with Version 4 UUIDs.

References

Related Vulnerabilities