CVE-2019-3795

CVE-2019-3795 is an insecure randomness vulnerability affecting Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5, specifically when SecureRandomFactoryBean#setSeed is used with a provided seed. This vulnerability is rated Medium severity (CVSS 5.3) due to its network-based attack vector and low attack complexity, potentially leading to information disclosure if an attacker can inspect the resulting random material. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat landscape.