PT-2026-8386 · Maypole · Maypole
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Maypole versions 2.10 through 2.13
Description
The Maypole Perl framework improperly generates session IDs. The session ID is created using the system time obtained from HTTP response headers, the
rand() function, and the process ID (PID). This method of session ID generation is considered insecure.Recommendations
Update Maypole to a version newer than 2.13.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Maypole