CVE-2025-40933

The Perl module Apache::AuthAny::Cookie versions 0.201 and earlier is vulnerable to insecure session ID generation. The root cause is the use of an MD5 hash of the epoch time combined with the built-in rand function , which is unsuitable for cryptographic purposes. Because the epoch time may be g...