점검 대응긴급KEV 미등록
CVE-2026-5081
CHORNY Apache::Session::Generate::ModUniqueId, Red Hat Hardened Images, apache::session::generate::moduniqueid 취약점
Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId (added in version 1.54) uses the value of the UNIQUE_ID environment variable for the session id. The UNIQUE_ID variable is set by the Apache mod_unique_id plugin, which generates unique ids for the request. The id is based on the IPv4 address, the process id, the epoch time, a 16-bit counter and a thread index, with no obfuscation. The server IP is often available to the public, and if not available, can be guessed from previous session ids being i...
- 대응 우선순위
- 점검
- CVSS
- 9.1
- EPSS
- 0.30% 백분위 22.5% · 2026.07.29 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.06