Security Advisory

CVE-2024-57835

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-05 16:11:11
Last updated 2025-04-07 18:27:55
Assigner CPANSec
CVSS score not scored
State PUBLISHED

Description

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values.  String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure