CVE-2010-1128

The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to…

published March 26, 2010

CVSS
—
EPSS
8%
Percentile
94.8
In the wild
Unconfirmed
What it is

The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08088 · 94.8th percentile
Published
2010-03-26T20:00Z
EPSS history
Timeline
  • 26 MAR 20:00Z
    The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to…
    cvelistv5