Security Advisory
CVE-2017-17845
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-01-001.