2 results · Feed
-
Medium 6.5
Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids
Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids. Apache::Session::Generate::SHA256 generated session ids insecurely. The default session id generator returns a SHA-256 hash of the built-in rand() function, the epo…
-
High 8.1
In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connectin…