Lucene search
Veracode Vulnerability DatabaseVERACODE:38070HistoryNov 17, 2022 - 5:14 a.m.
Insecure Random Number Generator
2022-11-1705:14:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
phpservermon
user.php
insecure random number generator
reset password hashes
0.001 Low
EPSS
Percentile
34.1%
phpservermon/phpservermon uses an insecure random number generator. The vulnerability exists in the generatePasswordResetToken function of User.php because of the insecure mt_rand random number generator function which allows an attacker to guess the reset password hashes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpservermon/phpservermon | le | v3.5.2 | |
| phpservermon/phpservermon | le | v3.5.2 |
Related
prion
prion
Design/Logic Flaw
2022-11-15 23:15:00
osv
osv
CVE-2021-4240
2022-11-15 23:15:10
Insufficient Entropy in PHPServerMon PRNG
2022-11-16 12:00:20
cve
cve
CVE-2021-4240
2022-11-15 23:15:10
nvd
nvd
CVE-2021-4240
2022-11-15 23:15:10
cvelist
cvelist
github
github
Insufficient Entropy in PHPServerMon PRNG
2022-11-16 12:00:20