CVE-2013-6386 | BDVDB-2026-58743 Detail

Description#

Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12013-12-07Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.