Php · Php · CVE-2010-1128
**Name of the Vulnerable Software and Affected Versions**
PHP versions prior to 5.2.13
**Description**
The Linear Congruential Generator (LCG) in PHP does not provide the expected entropy, making it easier for attackers to guess values that were intended to be unpredictable, such as session cookies generated by the uniqid function.
**Recommendations**
For versions prior to 5.2.13, update to version 5.2.13 or later to resolve the issue.