Описание
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
A flaw was found in perl-Net-OAuth. This vulnerability allows predictable nonce generation via insufficient cryptographic strength.
Отчет
This vulnerability doesn't affect any supported Red Hat product.
Дополнительная информация
Статус:
4.8 Medium
CVSS3
Связанные уязвимости
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, ...
In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is not cryptographically strong.
4.8 Medium
CVSS3