CVE-2018-12520

An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in deterministic session IDs being allocated for active user sessions. An attacker with foreknowledge of the operating system and standard library in use by the host running the service and the username of the user whose session they're targeting can abuse the deterministic random number generation in order to hijack the user's session, thus escalating their access.

• CWE-335

• http://seclists.org/fulldisclosure/2018/Jul/14Exploit, Mailing List, Third Party Advisory
• https://gist.github.com/Psychotropos/3e8c047cada9b1fb716e6a014a428b7fExploit
• https://github.com/ntop/ntopng/commit/30610bda60cbfc058f90a1c0a17d0e8f4516221aPatch
• https://www.exploit-db.com/exploits/44973/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Jul/14Exploit, Mailing List, Third Party Advisory
• https://gist.github.com/Psychotropos/3e8c047cada9b1fb716e6a014a428b7fExploit
• https://github.com/ntop/ntopng/commit/30610bda60cbfc058f90a1c0a17d0e8f4516221aPatch
• https://www.exploit-db.com/exploits/44973/Exploit, Third Party Advisory, VDB Entry

Published

Jul 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12503tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRIm…
• CVE-2018-12504tinyexr 0.9.5 has an assertion failure in ComputeChannelLayo…
• CVE-2018-1251Dell EMC Unity and UnityVSA versions prior to 4.3.1.15257030…8.3
• CVE-2018-12511In the mintToken function of a smart contract implementation…
• CVE-2018-12519An issue was discovered in ShopNx through 2017-11-17. The vu…
• CVE-2018-1252RSA Web Threat Detection versions prior to 6.4, contain an S…
• CVE-2018-12522An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12523An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12524An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12525An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12526Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 hav…
• CVE-2018-12528An issue was discovered on Intex N150 devices. The backup/re…