RVD#2036: Use of insecure MD2, MD4, MD5, or SHA1 hash function., /opt/ros_noetic_ws/src/ros/roslib/src/roslib/gentools.py:214

[rvd-bot]

{
    "id": 2036,
    "title": "RVD#2036: Use of insecure MD2, MD4, MD5, or SHA1 hash function., /opt/ros_noetic_ws/src/ros/roslib/src/roslib/gentools.py:214",
    "type": "bug",
    "description": "HIGH confidence of MEDIUM severity bug. Use of insecure MD2, MD4, MD5, or SHA1 hash function. at /opt/ros_noetic_ws/src/ros/roslib/src/roslib/gentools.py:214 See links for more info on the bug.",
    "cwe": "None",
    "cve": "None",
    "keywords": [
        "bandit",
        "bug",
        "static analysis",
        "testing",
        "triage",
        "bug"
    ],
    "system": "",
    "vendor": null,
    "severity": {
        "rvss-score": 0,
        "rvss-vector": "",
        "severity-description": "",
        "cvss-score": 0,
        "cvss-vector": ""
    },
    "links": [
        "https://github.com/aliasrobotics/RVD/issues/2036",
        "https://bandit.readthedocs.io/en/latest/blacklists/blacklist_calls.html#b303-md5"
    ],
    "flaw": {
        "phase": "testing",
        "specificity": "subject-specific",
        "architectural-location": "application-specific",
        "application": "N/A",
        "subsystem": "N/A",
        "package": "N/A",
        "languages": "None",
        "date-detected": "2020-05-29 (09:21)",
        "detected-by": "Alias Robotics",
        "detected-by-method": "testing static",
        "date-reported": "2020-05-29 (09:21)",
        "reported-by": "Alias Robotics",
        "reported-by-relationship": "automatic",
        "issue": "https://github.com/aliasrobotics/RVD/issues/2036",
        "reproducibility": "always",
        "trace": "/opt/ros_noetic_ws/src/ros/roslib/src/roslib/gentools.py:214",
        "reproduction": "See artifacts below (if available)",
        "reproduction-image": ""
    },
    "exploitation": {
        "description": "",
        "exploitation-image": "",
        "exploitation-vector": ""
    },
    "mitigation": {
        "description": "",
        "pull-request": "",
        "date-mitigation": ""
    }
}

[ibaiape]

Duplicate of #1929