← voltar
CVE-2026-46474

Trog::TOTP versions before 1.006 for Perl generate secrets using rand

CVSS 7.5 HIGHEPSS 0.3%CWE-331
Trog::TOTP versions before 1.006 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
TEODESIAN · Trog::TOTP

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://metacpan.org/release/TEODESIAN/Trog-TOTP-1.006/changeshttps://metacpan.org/release/TEODESIAN/Trog-TOTP-1.006/diff/TEODESIAN/Trog-TOTP-1.005#lib/Trog/TOTP.pmhttp://www.openwall.com/lists/oss-security/2026/05/15/18