Description
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.
Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TCHATZI | Authen::TOTP | < 0.1.1 | 0.1.1 |