Описание
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts.
These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
EPSS
Процентиль: 23%
0.00305
Низкий
7.5 High
CVSS3
Дефекты
CWE-338
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 2 месяцев назад
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
CVSS3: 7.5
debian
около 2 месяцев назад
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure rand ...
CVSS3: 7.5
github
около 2 месяцев назад
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
EPSS
Процентиль: 23%
0.00305
Низкий
7.5 High
CVSS3
Дефекты
CWE-338