CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-perl-cpan | Nov 16, 2023 | Apr 29, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-perlamazon-linux-ami-2-upgrade-perl-coreamazon-linux-ami-2-upgrade-perl-cpanamazon-linux-ami-2-upgrade-perl-debuginfoamazon-linux-ami-2-upgrade-perl-develamazon-linux-ami-2-upgrade-perl-extutils-cbuilderamazon-linux-ami-2-upgrade-perl-extutils-embedamazon-linux-ami-2-upgrade-perl-extutils-installamazon-linux-ami-2-upgrade-perl-io-zlibamazon-linux-ami-2-upgrade-perl-libsamazon-linux-ami-2-upgrade-perl-locale-maketext-simpleamazon-linux-ami-2-upgrade-perl-macrosamazon-linux-ami-2-upgrade-perl-module-corelistamazon-linux-ami-2-upgrade-perl-module-loadedamazon-linux-ami-2-upgrade-perl-object-accessoramazon-linux-ami-2-upgrade-perl-package-constantsamazon-linux-ami-2-upgrade-perl-pod-escapesamazon-linux-ami-2-upgrade-perl-testsamazon-linux-ami-2-upgrade-perl-time-piece | May 17, 2023 | Apr 29, 2023 | |
| Amazon_linux | — | amazon-linux-upgrade-perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-perlamazon-linux-2023-upgrade-perl-attribute-handlersamazon-linux-2023-upgrade-perl-autoloaderamazon-linux-2023-upgrade-perl-autosplitamazon-linux-2023-upgrade-perl-autouseamazon-linux-2023-upgrade-perl-bamazon-linux-2023-upgrade-perl-baseamazon-linux-2023-upgrade-perl-b-debuginfoamazon-linux-2023-upgrade-perl-benchmarkamazon-linux-2023-upgrade-perl-blibamazon-linux-2023-upgrade-perl-class-structamazon-linux-2023-upgrade-perl-config-extensionsamazon-linux-2023-upgrade-perl-cpanamazon-linux-2023-upgrade-perl-cpan-testsamazon-linux-2023-upgrade-perl-dbm-filteramazon-linux-2023-upgrade-perl-debuggeramazon-linux-2023-upgrade-perl-debuginfoamazon-linux-2023-upgrade-perl-debugsourceamazon-linux-2023-upgrade-perl-deprecateamazon-linux-2023-upgrade-perl-develamazon-linux-2023-upgrade-perl-devel-peekamazon-linux-2023-upgrade-perl-devel-peek-debuginfoamazon-linux-2023-upgrade-perl-devel-selfstubberamazon-linux-2023-upgrade-perl-diagnosticsamazon-linux-2023-upgrade-perl-dirhandleamazon-linux-2023-upgrade-perl-docamazon-linux-2023-upgrade-perl-dumpvalueamazon-linux-2023-upgrade-perl-dynaloaderamazon-linux-2023-upgrade-perl-encoding-warningsamazon-linux-2023-upgrade-perl-englishamazon-linux-2023-upgrade-perl-errnoamazon-linux-2023-upgrade-perl-extutils-constantamazon-linux-2023-upgrade-perl-extutils-embedamazon-linux-2023-upgrade-perl-extutils-miniperlamazon-linux-2023-upgrade-perl-fcntlamazon-linux-2023-upgrade-perl-fcntl-debuginfoamazon-linux-2023-upgrade-perl-fieldsamazon-linux-2023-upgrade-perl-file-basenameamazon-linux-2023-upgrade-perl-filecacheamazon-linux-2023-upgrade-perl-file-compareamazon-linux-2023-upgrade-perl-file-copyamazon-linux-2023-upgrade-perl-file-dosglobamazon-linux-2023-upgrade-perl-file-dosglob-debuginfoamazon-linux-2023-upgrade-perl-file-findamazon-linux-2023-upgrade-perl-filehandleamazon-linux-2023-upgrade-perl-file-statamazon-linux-2023-upgrade-perl-filetestamazon-linux-2023-upgrade-perl-findbinamazon-linux-2023-upgrade-perl-gdbm-fileamazon-linux-2023-upgrade-perl-gdbm-file-debuginfoamazon-linux-2023-upgrade-perl-getopt-stdamazon-linux-2023-upgrade-perl-hash-utilamazon-linux-2023-upgrade-perl-hash-util-debuginfoamazon-linux-2023-upgrade-perl-hash-util-fieldhashamazon-linux-2023-upgrade-perl-hash-util-fieldhash-debuginfoamazon-linux-2023-upgrade-perl-i18n-collateamazon-linux-2023-upgrade-perl-i18n-langinfoamazon-linux-2023-upgrade-perl-i18n-langinfo-debuginfoamazon-linux-2023-upgrade-perl-i18n-langtagsamazon-linux-2023-upgrade-perl-ifamazon-linux-2023-upgrade-perl-interpreteramazon-linux-2023-upgrade-perl-interpreter-debuginfoamazon-linux-2023-upgrade-perl-ioamazon-linux-2023-upgrade-perl-io-debuginfoamazon-linux-2023-upgrade-perl-ipc-open3amazon-linux-2023-upgrade-perl-lessamazon-linux-2023-upgrade-perl-libamazon-linux-2023-upgrade-perl-libnetcfgamazon-linux-2023-upgrade-perl-libsamazon-linux-2023-upgrade-perl-libs-debuginfoamazon-linux-2023-upgrade-perl-localeamazon-linux-2023-upgrade-perl-locale-maketext-simpleamazon-linux-2023-upgrade-perl-macrosamazon-linux-2023-upgrade-perl-math-complexamazon-linux-2023-upgrade-perl-memoizeamazon-linux-2023-upgrade-perl-meta-notationamazon-linux-2023-upgrade-perl-module-loadedamazon-linux-2023-upgrade-perl-mroamazon-linux-2023-upgrade-perl-mro-debuginfoamazon-linux-2023-upgrade-perl-ndbm-fileamazon-linux-2023-upgrade-perl-ndbm-file-debuginfoamazon-linux-2023-upgrade-perl-netamazon-linux-2023-upgrade-perl-nextamazon-linux-2023-upgrade-perl-odbm-fileamazon-linux-2023-upgrade-perl-odbm-file-debuginfoamazon-linux-2023-upgrade-perl-opcodeamazon-linux-2023-upgrade-perl-opcode-debuginfoamazon-linux-2023-upgrade-perl-openamazon-linux-2023-upgrade-perl-overloadamazon-linux-2023-upgrade-perl-overloadingamazon-linux-2023-upgrade-perl-phamazon-linux-2023-upgrade-perl-pod-functionsamazon-linux-2023-upgrade-perl-pod-htmlamazon-linux-2023-upgrade-perl-posixamazon-linux-2023-upgrade-perl-posix-debuginfoamazon-linux-2023-upgrade-perl-safeamazon-linux-2023-upgrade-perl-search-dictamazon-linux-2023-upgrade-perl-selectsaveramazon-linux-2023-upgrade-perl-selfloaderamazon-linux-2023-upgrade-perl-sigtrapamazon-linux-2023-upgrade-perl-sortamazon-linux-2023-upgrade-perl-subsamazon-linux-2023-upgrade-perl-symbolamazon-linux-2023-upgrade-perl-sys-hostnameamazon-linux-2023-upgrade-perl-sys-hostname-debuginfoamazon-linux-2023-upgrade-perl-term-completeamazon-linux-2023-upgrade-perl-term-readlineamazon-linux-2023-upgrade-perl-testamazon-linux-2023-upgrade-perl-testsamazon-linux-2023-upgrade-perl-text-abbrevamazon-linux-2023-upgrade-perl-threadamazon-linux-2023-upgrade-perl-thread-semaphoreamazon-linux-2023-upgrade-perl-tieamazon-linux-2023-upgrade-perl-tie-fileamazon-linux-2023-upgrade-perl-tie-memoizeamazon-linux-2023-upgrade-perl-timeamazon-linux-2023-upgrade-perl-time-pieceamazon-linux-2023-upgrade-perl-time-piece-debuginfoamazon-linux-2023-upgrade-perl-unicode-ucdamazon-linux-2023-upgrade-perl-user-pwentamazon-linux-2023-upgrade-perl-utilsamazon-linux-2023-upgrade-perl-varsamazon-linux-2023-upgrade-perl-vmsish | Feb 17, 2025 | Apr 29, 2023 | |
| Apple Osx Perl | apple-osx-upgrade-latest | Sep 1, 2025 | Sep 1, 2025 | |
| Centos_linux | — | centos-upgrade-perl-cpan | Nov 8, 2023 | Apr 29, 2023 |
| Debian | debian-upgrade-perl | Oct 23, 2024 | Apr 29, 2023 | |
| Dell Powerstore Dsa2024398 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 17, 2024 | |
| Dell Powerstore Dsa2024408 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Sep 26, 2024 | |
| Dell Powerstore Dsa2024432 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Oct 29, 2024 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-perlhuawei-euleros-2_0_sp10-upgrade-perl-libs | Jul 18, 2023 | Apr 29, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-perlhuawei-euleros-2_0_sp11-upgrade-perl-libs | Jan 10, 2024 | Apr 29, 2023 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-perl-cpan | Jan 10, 2024 | Apr 29, 2023 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-perlhuawei-euleros-2_0_sp9-upgrade-perl-libs | Jan 10, 2024 | Apr 29, 2023 | |
| Ibm Aix | ibm-aix-perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-perloracle-linux-upgrade-perl-coreoracle-linux-upgrade-perl-cpanoracle-linux-upgrade-perl-develoracle-linux-upgrade-perl-extutils-cbuilderoracle-linux-upgrade-perl-extutils-embedoracle-linux-upgrade-perl-extutils-installoracle-linux-upgrade-perl-io-zliboracle-linux-upgrade-perl-libsoracle-linux-upgrade-perl-locale-maketext-simpleoracle-linux-upgrade-perl-macrosoracle-linux-upgrade-perl-module-corelistoracle-linux-upgrade-perl-module-loadedoracle-linux-upgrade-perl-object-accessororacle-linux-upgrade-perl-package-constantsoracle-linux-upgrade-perl-pod-escapesoracle-linux-upgrade-perl-testsoracle-linux-upgrade-perl-time-piece | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | redhat-upgrade-perlredhat-upgrade-perl-coreredhat-upgrade-perl-cpanredhat-upgrade-perl-debuginforedhat-upgrade-perl-develredhat-upgrade-perl-extutils-cbuilderredhat-upgrade-perl-extutils-embedredhat-upgrade-perl-extutils-installredhat-upgrade-perl-io-zlibredhat-upgrade-perl-libsredhat-upgrade-perl-locale-maketext-simpleredhat-upgrade-perl-macrosredhat-upgrade-perl-module-corelistredhat-upgrade-perl-module-loadedredhat-upgrade-perl-object-accessorredhat-upgrade-perl-package-constantsredhat-upgrade-perl-pod-escapesredhat-upgrade-perl-testsredhat-upgrade-perl-time-piece | Nov 8, 2023 | Apr 29, 2023 | |
| Suse | — | suse-upgrade-perlsuse-upgrade-perl-32bitsuse-upgrade-perl-basesuse-upgrade-perl-base-32bitsuse-upgrade-perl-core-db_filesuse-upgrade-perl-core-db_file-32bitsuse-upgrade-perl-doc | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | ubuntu-pro-upgrade-perlubuntu-upgrade-perl | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub