Vendor
ASPEER
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely
WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the built-in rand() function. The rand function is passed a maximum value based on the …