7 matches found
Fedora 46 : perl-CGI-Session (2026-f47e713a34)
The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f47e713a34 advisory. Automatic update for perl-CGI-Session-4.49-1.fc46. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...
Fedora 45 : perl-CGI-Session (2026-65aea3d269)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-65aea3d269 advisory. Automatic update for perl-CGI-Session-4.49-1.fc45. Changelog Tue Aug 18 2026 Jitka Plesnikova - 4.49-1 - 4.49 bump rhbz2510691 - Fix CVE-2026-56016 rhbz24958...
Amazon Linux 2 : perl-CGI-Session, --advisory ALAS2-2026-3805 (ALAS-2026-3805)
The version of perl-CGI-Session installed on the remote host is prior to 4.35-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3805 advisory. CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The...
Updated perl-CGI-Session package fixes a security vulnerability
The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...
perl-CGI-Session-4.490.0-1.1 on GA media (moderate)
perl-CGI-Session-4.490.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11168-1 Rating: moderate Cross-References: CVE-2026-56016 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2026-56016
A flaw was found in perl-CGI-Session. This vulnerability allows a remote attacker to predict session identifiers due to the use of low-entropy sources in the generateid method. By predicting a session identifier, an attacker can impersonate a user's session, leading to a bypass of authentication...
