Approved changes feed: RSS · Atom
cpe:2.3:a:kgoldov:apache::authany:*:*:*:*:*:*:*:*part: a version: * update: authany
| Vendor | Kgoldov (85d04ec1-36b1-56e2-ba7b-ec723bfafc6a) |
|---|---|
| Product | Apache (bffbdb3d-94f0-52d8-a09c-5f8fdcc4bc64) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-40933 |
vulnerable | 2026-06-08 07:25:06.316453 |
Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely
Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely.
Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.
Predicable session ids could allow an attacker to gain access to systems.
Published: 2025-09-17T14:25:10.826Z
Updated: 2025-09-17T17:21:55.927Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.