HTTP::Tiny before 0.083 a Perl core module since 5.13.9 and available standalone on CPAN has an insecure default TLS configuration where users must opt in to verify certificates.

🗓️ 23 Jun 2023 07:00:00Reported by MicrosoftType

HTTP::Tiny before 0.083 had insecure default transport layer security requiring users to opt in to certificate verification.

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for June 2024.	29 Jan 202521:09	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in HTTP::Tiny affects IBM Netezza Appliance	16 Dec 202509:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Perl HTTP [CVE-2023-31486]	29 Feb 202420:13	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to sensitive information exposure due to Perl (CVE-2023-31484 and CVE-2023-31486)	2 Nov 202317:31	–	ibm
Tenable Nessus	Amazon Linux 2023 : perl-HTTP-Tiny, perl-HTTP-Tiny-tests (ALAS2023-2023-216)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : perl-Pod-Perldoc (ALAS2023-2023-217)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2023-218)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-HTTP-Tiny (ALAS-2023-2093)	1 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-Pod-Perldoc (ALAS-2023-2094)	1 Jul 202300:00	–	nessus