A vulnerability classified as problematic was found in TOKUHIROM Amon2 up to 6.16 on Perl. Affected by this issue is the function rand of the file /dev/urandom of the component Session ID Handler. The manipulation results in generation of predictable numbers or identifiers.

This vulnerability is reported as CVE-2025-15604. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.