CVE-2008-4107

The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in…

published September 18, 2008

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in products that rely on these functions for security-relevant functionality, as demonstrated by the password-reset functionality in Joomla! 1.5.x and WordPress before 2.6.2, a different vulnerability than CVE-2008-2107, CVE-2008-2108, and CVE-2008-4102.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03013 · 87.3th percentile
Published
2008-09-18T17:47Z
EPSS history
Timeline
  • 18 SEP 17:47Z
    The (1) rand and (2) mt_rand functions in PHP 5.2.6 do not produce cryptographically strong random numbers, which allows attackers to leverage exposures in…
    cvelistv5