15932 matches found
cpanminus Data Forgery Issue Vulnerability (CNVD-2022-02759)
cpanminus is a script that is used to obtain, decompress, build and install modules from CPAN without performing any other operations. cpanminus is vulnerable to a data forgery issue, which can be exploited by attackers to bypass signature verification...
cpanminus signature verification vulnerability
cpanminus is a script that obtains, unpacks, builds and installs modules from CPAN and does not perform any other operations. cpanminus suffers from a signature verification vulnerability that stems from packages not uniquely defining signature data. No detailed vulnerability details are currentl...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
DEBIAN-CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
Security feature bypass
CPAN 2.28 allows Signature Verification Bypass...
UBUNTU-CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
DEBIAN-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
Security feature bypass
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
UBUNTU-CVE-2020-16154
The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16156
CVE-2020-16156 affects CPAN/CPAN.pm (notably CPAN 2.28 and its signature verification handling). The root cause is a bypass where an attacker can prepend or manipulate CHECKSUMS to bypass signature verification, enabling installation of tampered modules. Public documents confirm that the issue is...
CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass...
CVE-2020-16154
CVE-2020-16154 affects the Perl module perl-App-cpanminus, reported as version 1.7044. The issue is a bypass of signature verification for CHECKSUMS files, enabling potential integrity concerns. Public advisories (e.g., ALAS-2025-2802) instruct updating perl-App-cpanminus (e.g., via yum update) t...