Apache::AuthAny vulnerabilities

1 known vulnerability in Apache::AuthAny from KGOLDOV. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache::AuthAny: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2025-40933Sep 17, 2025KGOLDOV

  Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely. Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date h