https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:01:00.372815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-40933 CVE-2025-40933 — Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely 2026-10-07T22:01:00.390511+00:00

Affected: KGOLDOV Apache::AuthAny

Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely.

Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.

Predicable session ids could allow an attacker to gain access to systems.