CVE-2025-15604

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-15604", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-03-08T23:56:33.670Z", "datePublished": "2026-03-28T18:43:56.318Z", "dateUpdated": "2026-04-01T14:13:01.746Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Amon2", "product": "Amon2", "programFiles": ["lib/Amon2/Util.pm"], "programRoutines": [{"name": "Amon2::Util::random_string"}], "repo": "https://github.com/tokuhirom/Amon", "vendor": "TOKUHIROM", "versions": [{"lessThan": "6.17", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.\n\nIn versions 6.06 through 6.16, the random_string function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 hash seeded with the built-in rand() function, the PID, and the high resolution epoch time. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.\n\nBefore version 6.06, there was no fallback when /dev/urandom was not available.\n\nBefore version 6.04, the random_string function used the built-in rand() function to generate a mixed-case alphanumeric string.\n\nThis function may be used for generating session ids, generating secrets for signing or encrypting cookie session data and generating tokens used for Cross Site Request Forgery (CSRF) protection."}], "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}, {"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}, {"capecId": "CAPEC-586", "descriptions": [{"lang": "en", "value": "CAPEC-586 Object Injection"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-340", "description": "CWE-340 Generation of Predictable Numbers or Identifiers", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-03-28T18:43:56.318Z"}, "references": [{"url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/diff/TOKUHIROM/Amon2-6.16#lib/Amon2/Util.pm"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/changes"}, {"tags": ["issue-tracking"], "url": "https://github.com/tokuhirom/Amon/pull/135"}, {"tags": ["technical-description"], "url": "https://security.metacpan.org/docs/guides/random-data-for-security.html"}], "solutions": [{"lang": "en", "value": "Upgrade to Amon2 version 6.17 or later."}], "source": {"discovery": "UNKNOWN"}, "title": "Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/03/28/4"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-28T20:06:46.387Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-01T14:12:25.901323Z", "id": "CVE-2025-15604", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T14:13:01.746Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/03/28/4"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-28T20:06:46.387Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-15604", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-01T14:12:25.901323Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-01T14:12:56.077Z"}}], "cna": {"title": "Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}, {"capecId": "CAPEC-115", "descriptions": [{"lang": "en", "value": "CAPEC-115 Authentication Bypass"}]}, {"capecId": "CAPEC-586", "descriptions": [{"lang": "en", "value": "CAPEC-586 Object Injection"}]}], "affected": [{"repo": "https://github.com/tokuhirom/Amon", "vendor": "TOKUHIROM", "product": "Amon2", "versions": [{"status": "affected", "version": "0", "lessThan": "6.17", "versionType": "custom"}], "packageName": "Amon2", "programFiles": ["lib/Amon2/Util.pm"], "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "programRoutines": [{"name": "Amon2::Util::random_string"}]}], "solutions": [{"lang": "en", "value": "Upgrade to Amon2 version 6.17 or later."}], "references": [{"url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/diff/TOKUHIROM/Amon2-6.16#lib/Amon2/Util.pm"}, {"url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/changes", "tags": ["release-notes"]}, {"url": "https://github.com/tokuhirom/Amon/pull/135", "tags": ["issue-tracking"]}, {"url": "https://security.metacpan.org/docs/guides/random-data-for-security.html", "tags": ["technical-description"]}], "x_generator": {"engine": "cpansec-cna-tool 0.1"}, "descriptions": [{"lang": "en", "value": "Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.\n\nIn versions 6.06 through 6.16, the random_string function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 hash seeded with the built-in rand() function, the PID, and the high resolution epoch time. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.\n\nBefore version 6.06, there was no fallback when /dev/urandom was not available.\n\nBefore version 6.04, the random_string function used the built-in rand() function to generate a mixed-case alphanumeric string.\n\nThis function may be used for generating session ids, generating secrets for signing or encrypting cookie session data and generating tokens used for Cross Site Request Forgery (CSRF) protection."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-340", "description": "CWE-340 Generation of Predictable Numbers or Identifiers"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-338", "description": "CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-03-28T18:43:56.318Z"}}}, "cveMetadata": {"cveId": "CVE-2025-15604", "state": "PUBLISHED", "dateUpdated": "2026-04-01T14:13:01.746Z", "dateReserved": "2026-03-08T23:56:33.670Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-03-28T18:43:56.318Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Amon2", "product": "Amon2", "programFiles": ["lib/Amon2/Util.pm"], "programRoutines": [{"name": "Amon2::Util::random_string"}], "repo": "https://github.com/tokuhirom/Amon", "vendor": "TOKUHIROM", "versions": [{"lessThan": "6.17", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tokuhirom:amon2:*:*:*:*:*:perl:*:*", "matchCriteriaId": "0920218A-C374-46FB-A8C8-FC92ACFB73DB", "versionEndExcluding": "6.17", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.\n\nIn versions 6.06 through 6.16, the random_string function will attempt to read bytes from the /dev/urandom device, but if that is unavailable then it generates bytes by concatenating a SHA-1 hash seeded with the built-in rand() function, the PID, and the high resolution epoch time. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is unsuitable for cryptographic usage.\n\nBefore version 6.06, there was no fallback when /dev/urandom was not available.\n\nBefore version 6.04, the random_string function used the built-in rand() function to generate a mixed-case alphanumeric string.\n\nThis function may be used for generating session ids, generating secrets for signing or encrypting cookie session data and generating tokens used for Cross Site Request Forgery (CSRF) protection."}, {"lang": "es", "value": "Las versiones de Amon2 anteriores a la 6.17 para Perl utilizan una implementaci\u00f3n insegura de random_string para funciones de seguridad.\n\nEn las versiones 6.06 a la 6.16, la funci\u00f3n random_string intentar\u00e1 leer bytes del dispositivo /dev/urandom, pero si este no est\u00e1 disponible, entonces genera bytes concatenando un hash SHA-1 inicializado con la funci\u00f3n rand() incorporada, el PID y el tiempo de \u00e9poca de alta resoluci\u00f3n. El PID provendr\u00e1 de un peque\u00f1o conjunto de n\u00fameros, y el tiempo de \u00e9poca puede ser adivinado, si no se filtra del encabezado HTTP Date. La funci\u00f3n rand incorporada no es adecuada para uso criptogr\u00e1fico.\n\nAntes de la versi\u00f3n 6.06, no hab\u00eda un mecanismo de respaldo cuando /dev/urandom no estaba disponible.\n\nAntes de la versi\u00f3n 6.04, la funci\u00f3n random_string utilizaba la funci\u00f3n rand() incorporada para generar una cadena alfanum\u00e9rica de may\u00fasculas y min\u00fasculas.\n\nEsta funci\u00f3n puede ser utilizada para generar IDs de sesi\u00f3n, generar secretos para firmar o cifrar datos de sesi\u00f3n de cookie y generar tokens utilizados para la protecci\u00f3n contra la falsificaci\u00f3n de solicitudes entre sitios (CSRF)."}], "id": "CVE-2025-15604", "lastModified": "2026-06-17T08:38:06.137", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15604", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-01T14:12:25.901323Z", "version": "2.0.3"}}]}, "published": "2026-03-28T19:16:53.387", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/tokuhirom/Amon/pull/135"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Product"], "url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/changes"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Product"], "url": "https://metacpan.org/release/TOKUHIROM/Amon2-6.17/diff/TOKUHIROM/Amon2-6.16#lib/Amon2/Util.pm"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Third Party Advisory"], "url": "https://security.metacpan.org/docs/guides/random-data-for-security.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/03/28/4"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-338"}, {"lang": "en", "value": "CWE-340"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.17)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Amon2", "source": "cna", "vendor": "TOKUHIROM"}, "product": "amon2", "vendor": "tokuhirom"}], "analysis": {"en": {"generated_at": "2026-04-01T06:59:54.302929+00:00", "value": {"mitigation_remediation": ["Upgrade the Amon2 Perl module to version 6.17 or newer.", "Verify that the application imports the updated module and that no legacy random_string logic remains.", "Review application code for any hard\u2011coded or custom random_string calls and replace them with a secure random generator.", "Monitor authentication logs for suspicious session activity that could indicate token prediction or replay attacks."], "summary": {"action": "Immediate Patch", "impact": "Predictable token generation leading to session hijacking or secret compromise"}, "threat_synthesis": {"affected_systems": "All official releases of the Perl module Amon2 distributed by TOKUHIROM that are older than 6.17 are affected. That includes the series 6.06 through 6.16, which use the insecure fallback logic, as well as earlier releases 6.04 and 6.05 that rely solely on rand(), and any pre\u20116.04 versions with no fallback. Applications that import this module to produce session IDs, CSRF tokens, or signed cookie data are at risk; these typically include web frameworks and CGI scripts built upon Amon2.", "description_and_impact": "Amon2 versions prior to 6.17 for Perl contain an insecure implementation of the random_string utility used for generating session identifiers, signing secrets, and CSRF tokens. The function relies on non\u2011cryptographic randomness; it attempts to read from /dev/urandom, but when that is unavailable it falls back to a construction that concatenates a SHA\u20111 hash seeded with the built\u2011in rand() function, the process ID and a high\u2011resolution epoch time. Because the seed components have limited entropy or are predictable, the generated tokens can be reproduced or guessed, exposing the application to session hijacking or credential compromise. This weakness maps to CWE\u2011338 (Cryptographic Failure: Random Number Generation) and CWE\u2011340 (Cryptographic Failure: Lack of Cryptographic Randomness).", "risk_and_exploitability": "The CVSS base score of 9.8 marks this as a critical vulnerability, yet the EPSS of less than 1% suggests a low likelihood of current exploitation, and the issue is not catalogued in CISA's Known Exploited Vulnerabilities list. Based on the description, it is inferred that an attacker could remotely compromise an application that generates or exposes tokens through HTTP endpoints, or locally for a user that can trigger token generation. No elevated privileges are required, and the exploitation depends solely on the lack of cryptographic randomness. Consequently, the risk escalates for any service that depends on Amon2 for security token generation."}}}}, "created": "2026-03-29T20:32:02.747840+00:00", "updated": "2026-04-02T07:55:10.167045+00:00", "vendors": ["tokuhirom", "tokuhirom$PRODUCT$amon2"]}