CVE-2026-5085 Details
Description
Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method returns an MD5 digest seeded by the epoch time, a random hash reference, a call to the built-in rand() function and the process id. The same method is used in the _generateID method in Solstice::Subsession, which is part of the same distribution. The epoch time may be guessed, if it is not leaked in the HTTP Date header. Stringified hash refences will contain predictable content. The built-in rand() function is seeded by 16-bits and is unsuitable for security purposes. The process id comes from a small set of numbers. Predictable session ids could allow an attacker to gain access to systems.
A vulnerability exists in Solstice::Session versions through 1440 for Perl, where session IDs are generated insecurely. The _generateSessionID method creates an MD5 digest that is predictable, as it is based on the epoch time, a random hash reference, the built-in rand() function, and the process ID. This method is also used in Solstice::Subsession, which is part of the same distribution. The predictability of the session IDs could allow an attacker to gain unauthorized access to systems.
To address this vulnerability, update to a version of Solstice::Session that generates session IDs using a secure random number generator. Avoid using the built-in rand() function for security-related purposes.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://metacpan.org/dist/Solstice/source/lib/Solstice/Session.pm#L481 | CPANSec | Product |
| https://metacpan.org/dist/Solstice/source/lib/Solstice/Subsession.pm#L105 | CPANSec | Product |
| https://security.metacpan.org/docs/guides/random-data-for-security.html | CPANSec | Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2026/04/13/2 | CVE | Mailing List |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-338 | Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | CPANSec |
| CWE-340 | Generation of Predictable Numbers or Identifiers | CPANSec |
Affected Products
| Product | Versions |
|---|---|
| mcrawfor solstice::session | 1440 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | CPANSec |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 23, 2026 | Initial Analysis | [email protected] |
| Apr 13, 2026 | CVE Modified | CVE |
| Apr 13, 2026 | CVE Modified | CISA-ADP |
| Apr 13, 2026 | New CVE Received | CPANSec |