1. Home
  2. CVE Database
  3. CVE-2025-15578
CRITICAL · 9.8

CVE-2025-15578

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in...

Vulnerability Description

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in rand() function, and the PID.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TeejayMaypole>= 2.10, <= 2.13

Related Weaknesses (CWE)

CWE-338

References

FAQ

What is CVE-2025-15578?

CVE-2025-15578 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time (which is available from HTTP response headers), a call to the built-in...

How severe is CVE-2025-15578?

CVE-2025-15578 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-15578?

Check the references section above for vendor advisories and patch information. Affected products include: Teejay Maypole.