CVE-2009-0486

CVE-2009-0486 describes a vulnerability in Bugzilla versions 3.2.1, 3.0.7, and 3.3.2 when operating with mod_perl. The issue stems from Apache children sharing the same random number generator seed, leading to predictable random tokens. This flaw allows remote attackers to bypass CSRF protections, potentially enabling unauthorized actions as other users. The vulnerability has a CVSS score of 7.5, indicating high severity with network attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.