9.1
CVE-2024-58040
- EPSS 0.03%
- Veröffentlicht 30.09.2025 11:37:36
- Zuletzt bearbeitet 09.03.2026 17:17:45
- Quelle 9b29abf9-4ab0-4765-b253-1875cd
- CVE-Watchlists
- Unerledigt
LoginCrypt::RandomEncryption for Perl version 0.01 uses insecure rand() function during encryption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qwer ≫ Crypt::randomencryption Version0.01 SwPlatformperl
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.068 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-331 Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.