Weak PRNG generator is used to generate session cookie.
vulners.com/securityvulns/securityvulns:doc:20401