CVE-2026-5083
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
08/04/2026
Última modificación:
08/04/2026
Descripción
*** Pendiente de traducción *** Ado::Sessions versions through 0.935 for Perl generates insecure session ids.<br />
<br />
The session id is generated from a SHA-1 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.<br />
<br />
Predicable session ids could allow an attacker to gain access to systems.<br />
<br />
Note that Ado is no longer maintained, and has been removed from the CPAN index. It is still available on BackPAN.
Impacto
Puntuación base 3.x
5.30
Gravedad 3.x
MEDIA