PT-2026-8386 · Maypole · Maypole
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Maypole versions 2.10 through 2.13
Description
The Maypole Perl framework improperly generates session IDs. The session ID is created using the system time obtained from HTTP response headers, the
rand() function, and the process ID (PID). This method of session ID generation is considered insecure.Recommendations
Update Maypole to a version newer than 2.13.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Maypole