Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-4241

Date: November 14, 2022

A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may be used. The name of the patch is bb10a5f3c68527c58073258cb12446782d223bc3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213744.

Language: PHP

Severity Score

Related Resources (7)

https://huntr.dev/bounties/1-phpservermon/phpservermon
https://nvd.nist.gov/vuln/detail/CVE-2021-4241
https://vuldb.com/?id.213744
https://github.com/phpservermon/phpservermon
https://github.com/phpservermon/phpservermon/commit/bb10a5f3c68527c58073258cb12446782d223bc3
https://huntr.dev/bounties/1-phpservermon/phpservermon/
https://www.mend.io/vulnerability-database/CVE-2021-4241

Severity Score

Weakness Type (CWE)

Insufficient Entropy

CWE-331

Use of Insufficiently Random Values

CWE-330

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CWE-338

Use of Predictable Algorithm in Random Number Generator

CWE-1241

CVSS v3.1

Base Score:
Attack Vector (AV): ADJACENT_NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us