CyberRota Analysis
AI analysis pending.
CVE
CVE-2010-1128
Severity
MEDIUM
CVSS
6.4
EPSS
7.94%
Original NVD Description
The Linear Congruential Generator (LCG) in PHP before 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent attackers to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniqid function.