Skip to content
OpenAdvisories

Product · BEROV

Ado::Sessions

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Ado::Sessions versions through 0.935 for Perl generates insecure session ids

    Ado::Sessions versions through 0.935 for Perl generates insecure session ids. The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time …