← Retour à la recherche de CVE

CVE-2026-16235

Crypt::Password

Description

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.

CVSS 9.8EPSS 0.357%Risque 1.01
Voir la source
Publication
2026-07-20 07:16:37
Versions concernées
<=0.28
Type
Bibliothèque
Dernière modification
2026-07-20 19:17:19
Vecteur
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H