Description (CNA)
WWW::OAuth 1.000 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| DBOOK / WWW::OAuth | affected 0 through 1.000 |
CWE
CWE-338
References
- https://perldoc.perl.org/functions/rand
- https://security.metacpan.org/docs/guides/random-data-for-security.html
- https://metacpan.org/release/DBOOK/WWW-OAuth-1.000/source/lib/WWW/OAuth.pm#L86
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.