CVE-2024-57835
Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions
Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure
Reserved 2025-03-26 | Published 2025-04-05 | Updated 2025-04-07 | Assigner CPANSecCWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
metacpan.org/...ring-Random-0.32/source/lib/String/Random.pm
metacpan.org/...LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm
metacpan.org/...LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm
security.metacpan.org/...uides/random-data-for-security.html
Support options
