Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2021-4240

Good to know:

icon

Date: November 15, 2022

A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may be used. The name of the patch is 3daa804d5f56c55b3ae13bfac368bb84ec632193. It is recommended to apply a patch to fix this issue. The identifier VDB-213717 was assigned to this vulnerability.

Language: PHP

Severity Score

Related Resources (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-4240
https://github.com/phpservermon/phpservermon/commit/3daa804d5f56c55b3ae13bfac368bb84ec632193
https://vuldb.com/?id.213717
https://huntr.dev/bounties/2-phpservermon/phpservermon/
https://www.mend.io/vulnerability-database/CVE-2021-4240

Severity Score

Weakness Type (CWE)

Insufficient Entropy

CWE-331

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

CWE-338

Use of Insufficiently Random Values

CWE-330

Use of Predictable Algorithm in Random Number Generator

CWE-1241

Top Fix

icon

Upgrade Version

Upgrade to version 3daa804d5f56c55b3ae13bfac368bb84ec632193

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): NONE
Availability (A): NONE

Do you need more information?

Contact Us