CVE-2024-57835

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand function, which is not cryptographically secure...

CVE-2024-57835

The Amon2::Auth::Site::LINE Perl component (versions up to 0.04 ) is vulnerable to the use of a predictable random number generator . The software utilizes the String::Random module to generate nonce values ; however, this module defaults to Perl's built-in rand() function, which is not cryptogra...