CVE-2021-4241
PHPServerMon PRNG has Insufficient Entropy
5.3
MEDIUM
CVSS 3.1
EPSS 0.77%
描述
A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function `setUserLoggedIn` of the file `src/psm/Service/User.php`. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may be used. The name of the patch is bb10a5f3c68527c58073258cb12446782d223bc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213744.
如何修補 CVE-2021-4241
要修補 CVE-2021-4241,請將受影響套件升級到下列已修補版本。
- —升級至 3.6.0 或更新版本
CVE-2021-4241 正在被利用嗎?
低 — EPSS 為 0.8%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 3.6.0
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |