漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Apache::SessionX versions through 2.01 for Perl create insecure session id
Vulnerability Description
Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 hash seeded with the built-in rand() function, the epoch time, and the PID. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage. Predicable session ids could allow an attacker to gain access to systems.
CVSS Information
N/A
Vulnerability Type
可预测问题
Vulnerability Title
Apache::SessionX 安全漏洞
Vulnerability Description
Apache::SessionX是GRICHTER个人开发者的一个会话管理模块。 Apache::SessionX 2.01及之前版本存在安全漏洞，该漏洞源于不安全地创建会话ID，可能导致未经授权的系统访问。
CVSS Information
N/A
Vulnerability Type
N/A