Skip to content
OpenAdvisories

Vendor

ASPEER

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely

    WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely. The session handler generates the session id from an MD5 hash seeded with a call to the built-in rand() function. The rand function is passed a maximum value based on the …