Lucene search

GoogleOSV:CVE-2021-4241

HistoryNov 15, 2022 - 11:15 p.m.

CVE-2021-4241

2022-11-1523:15:14

Google

osv.dev

phpservermon

vulnerability

random number generator

manipulation

public disclosure

patch

vdb-213744

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

34.1%

JSON

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may be used. The name of the patch is bb10a5f3c68527c58073258cb12446782d223bc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213744.

References

github.com/phpservermon/phpservermon/commit/bb10a5f3c68527c58073258cb12446782d223bc3

huntr.dev/bounties/1-phpservermon/phpservermon/

vuldb.com/?id.213744

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

34.1%

JSON

Related for OSV:CVE-2021-4241