๐Ÿ” CVE Alert

CVE-2002-20002

MEDIUM 5.4
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

CWE CWE-338
Vendor n/a
Product n/a
Published Jan 2, 2025
Last Updated Jan 6, 2025
Stay Ahead of the Next One

Get instant alerts for n/a n/a

Be the first to know when new medium vulnerabilities affecting n/a n/a are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

n/a / n/a
n/a

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
metacpan.org: https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes github.com: https://github.com/briandfoy/cpan-security-advisory/issues/184 metacpan.org: https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm