Description (CNA)
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RRWO / Crypt::SaltedHash | affected 0 through 0.09 |
CWE
CWE-338
References
- https://metacpan.org/release/RRWO/Crypt-SaltedHash-0.10/changes
- https://github.com/robrwo/perl-Crypt-SaltedHash/commit/9b68437d2cd420b819b3a795474c3870338d38d5.patch
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.