| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 5.2.0= 5.2.1= 5.2.10= 5.2.11= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6= 5.2.7= 5.2.8= 5.2.9≤ 5.2.12 |
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free