CVE-2013-4347

CVE-2013-4347 describes a weak random number generation vulnerability in the SimpleGeo python-oauth2 library, specifically affecting the make_nonce, generate_nonce, and generate_verifier functions. This flaw, present in products like urbanairship python-oauth2, allows remote attackers to more easily guess nonces through brute-force attacks. With a CVSS score of 5.8, this vulnerability has a network attack vector, medium attack complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.