Lucene search
+L

17 matches found

Mageia
Mageia
•added 2026/08/31 7:40 p.m.•10 views

Updated perl-Catalyst-Plugin-Authentication packages fix a security vulnerability

Catalyst::Plugin::Authentication versions before 0.10027 for Perl are susceptible to session fixation attacks. CVE-2009-10007...

9.1CVSS5.9AI score0.00369EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/31 7:40 p.m.•19 views

MGASA-2026-0351 Updated perl-Catalyst-Plugin-Authentication packages fix a security vulnerability

Catalyst::Plugin::Authentication versions before 0.10027 for Perl are susceptible to session fixation attacks. CVE-2009-10007...

9.1CVSS5.9AI score0.00369EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/06/09 7:34 a.m.•25 views

CVE-2009-10007

Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...

9.1CVSS5.5AI score0.00369EPSS
SaveExploits0
CVE
CVE
•added 2026/06/09 7:34 a.m.•42 views

CVE-2009-10007

The Catalyst::Plugin::Authentication Perl library is vulnerable to session fixation attacks in versions prior to 0.10_027 . The root cause is that the component fails to automatically change the session ID upon successful authentication. This allows an attacker who has obtained a session ID cooki...

9.1CVSS5.5AI score0.00369EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2009-10007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not...

9.1CVSS5.7AI score0.00369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•0 views

CVE-2009-10007: Session Fixation

Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...

9.1CVSS5.8AI score0.00369EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/09 12:00 a.m.•11 views

CVE-2009-10007

Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...

9.1CVSS6.1AI score0.00369EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/06/01 10:14 a.m.•20 views

CVE-2026-5091

A flaw was found in Catalyst::Plugin::Authentication. This vulnerability allows a remote attacker to conduct timing attacks by observing discrepancies in the time it takes to compare passwords or hashes. This could enable the attacker to guess the underlying hash or password, leading to...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References2
OSV
OSV
•added 2026/05/29 5:12 a.m.•29 views

MGASA-2026-0160 Updated perl-Catalyst-Plugin-Authentication package fixes a security vulnerability

The updated package fixes a security vulnerability: Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. CVE-2026-5091...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/05/26 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-5091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison...

5.1CVSS5.7AI score0.00177EPSS
SaveExploits0References3
NVD
NVD
•added 2026/05/21 10:16 p.m.•24 views

CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS0.00177EPSS
SaveExploits0References3
OSV
OSV
•added 2026/05/21 10:16 p.m.•14 views

UBUNTU-CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References4
CVE
CVE
•added 2026/05/21 9:07 p.m.•53 views

CVE-2026-5091

The Catalyst::Plugin::Authentication Perl module (versions through 0.10024 ) is vulnerable to timing attacks because it utilizes Perl's built-in eq comparison. Attackers can exploit timing discrepancies to potentially guess the underlying hash or password . This vulnerability affects the module's...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/05/21 9:07 p.m.•26 views

CVE-2026-5091

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.8AI score0.00177EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/21 12:00 a.m.•1 views

CVE-2026-5091: Observable Timing Discrepancy

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS5.7AI score0.00177EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/21 12:00 a.m.•24 views

Catalyst-Plugin-Authentication 安全漏洞

Catalyst-Plugin-Authentication is an open-source authentication plugin framework developed by Catalyst. Versions of Catalyst-Plugin-Authentication prior to 0.10024 contain security vulnerabilities; these vulnerabilities stem from the use of the Perl built-in eq comparison function, which may lead...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/21 12:00 a.m.•24 views

PT-2026-42551

Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password...

5.1CVSS5.8AI score0.00177EPSS
SaveExploits0References5
Rows per page
Query Builder