Описание
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 5.26.1-6ubuntu0.7 |
| devel | released | 5.36.0-7ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 5.18.2-2ubuntu1.7+esm5 |
| esm-infra/bionic | not-affected | 5.26.1-6ubuntu0.7 |
| esm-infra/focal | not-affected | 5.30.0-9ubuntu0.4 |
| esm-infra/xenial | released | 5.22.1-9ubuntu0.9+esm2 |
| focal | released | 5.30.0-9ubuntu0.4 |
| jammy | released | 5.34.0-3ubuntu1.2 |
| kinetic | released | 5.34.0-5ubuntu1.2 |
| lunar | released | 5.36.0-7ubuntu0.23.04.1 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 79%
0.01385
Низкий
8.1 High
CVSS3
Связанные уязвимости
CVSS3: 7.4
redhat
около 2 лет назад
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS3: 8.1
nvd
около 2 лет назад
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS3: 8.1
debian
около 2 лет назад
CPAN.pm before 2.35 does not verify TLS certificates when downloading ...
EPSS
Процентиль: 79%
0.01385
Низкий
8.1 High
CVSS3