Beveiligingsadvies

CVE-2026-5086

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-13 22:54:53
Laatst bijgewerkt 2026-04-15 20:03:28
Toegewezen door CPANSec
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.