Skip to content
OpenAdvisories

Vendor

TANIGUCHI

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions

    Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values.  String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure