Description
Trog::TOTP versions before 1.006 for Perl generate secrets using rand.
Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TEODESIAN | Trog::TOTP | < 1.006 | 1.006 |