CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-CPAN | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-develUpgrade perl-Time-PieceUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perl-libsUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-testsUpgrade perl-Pod-EscapesUpgrade perl-coreUpgrade perl-CPANUpgrade perlUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-CBuilder | May 17, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-Module-LoadedUpgrade perl-FcntlUpgrade perl-libnetcfgUpgrade perl-I18N-LangTagsUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-localeUpgrade perl-ODBM_FileUpgrade perl-TieUpgrade perl-vmsishUpgrade perl-mro-debuginfoUpgrade perl-TimeUpgrade perl-sortUpgrade perl-BUpgrade perl-debuginfoUpgrade perl-lessUpgrade perl-Term-ReadLineUpgrade perl-Time-Piece-debuginfoUpgrade perl-Thread-SemaphoreUpgrade perlUpgrade perl-ifUpgrade perl-NetUpgrade perl-Unicode-UCDUpgrade perl-filetestUpgrade perl-Time-PieceUpgrade perl-openUpgrade perl-FileHandleUpgrade perl-File-statUpgrade perl-mroUpgrade perl-Getopt-StdUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-Peek-debuginfoUpgrade perl-IOUpgrade perl-Term-CompleteUpgrade perl-IPC-Open3Upgrade perl-Hash-Util-debuginfoUpgrade perl-File-BasenameUpgrade perl-diagnosticsUpgrade perl-interpreter-debuginfoUpgrade perl-ErrnoUpgrade perl-baseUpgrade perl-GDBM_File-debuginfoUpgrade perl-interpreterUpgrade perl-DirHandleUpgrade perl-ExtUtils-ConstantUpgrade perl-libs-debuginfoUpgrade perl-MemoizeUpgrade perl-overloadUpgrade perl-meta-notationUpgrade perl-Pod-HtmlUpgrade perl-Sys-HostnameUpgrade perl-BenchmarkUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-ThreadUpgrade perl-File-CompareUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Tie-MemoizeUpgrade perl-Tie-FileUpgrade perl-fieldsUpgrade perl-IO-debuginfoUpgrade perl-SafeUpgrade perl-SymbolUpgrade perl-Attribute-HandlersUpgrade perl-DynaLoaderUpgrade perl-utilsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-NEXTUpgrade perl-CPAN-testsUpgrade perl-Class-StructUpgrade perl-OpcodeUpgrade perl-ODBM_File-debuginfoUpgrade perl-encoding-warningsUpgrade perl-DBM_FilterUpgrade perl-Hash-UtilUpgrade perl-libUpgrade perl-TestUpgrade perl-DumpvalueUpgrade perl-autouseUpgrade perl-SelfLoaderUpgrade perl-File-CopyUpgrade perl-docUpgrade perl-develUpgrade perl-CPANUpgrade perl-Math-ComplexUpgrade perl-I18N-CollateUpgrade perl-FileCacheUpgrade perl-Fcntl-debuginfoUpgrade perl-Search-DictUpgrade perl-POSIXUpgrade perl-Pod-FunctionsUpgrade perl-File-DosGlob-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-debuggerUpgrade perl-blibUpgrade perl-POSIX-debuginfoUpgrade perl-B-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Devel-PeekUpgrade perl-Opcode-debuginfoUpgrade perl-AutoSplitUpgrade perl-phUpgrade perl-sigtrapUpgrade perl-varsUpgrade perl-Text-AbbrevUpgrade perl-Devel-SelfStubberUpgrade perl-AutoLoaderUpgrade perl-testsUpgrade perl-subsUpgrade perl-SelectSaverUpgrade perl-libsUpgrade perl-GDBM_FileUpgrade perl-FindBinUpgrade perl-ExtUtils-MiniperlUpgrade perl-File-FindUpgrade perl-EnglishUpgrade perl-User-pwentUpgrade perl-NDBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-NDBM_FileUpgrade perl-debugsourceUpgrade perl-overloading | Feb 17, 2025 | Apr 29, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perl | Oct 23, 2024 | Apr 29, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade perl-libsUpgrade perl | Jul 18, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-Locale-Maketext-SimpleUpgrade perlUpgrade perl-coreUpgrade perl-macrosUpgrade perl-Object-AccessorUpgrade perl-Module-LoadedUpgrade perl-Pod-EscapesUpgrade perl-develUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-ExtUtils-EmbedUpgrade perl-CPANUpgrade perl-Package-ConstantsUpgrade perl-Module-CoreList | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perl-testsUpgrade perl-coreUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-Module-LoadedUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-CBuilderNo solution existsUpgrade perl-macrosUpgrade perl-Time-PieceUpgrade perlUpgrade perl-CPANUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-Pod-Escapes | Nov 8, 2023 | Apr 29, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 29, 2023 |
| Suse | — | Upgrade perl-docUpgrade perl-baseUpgrade perl-base-32bitUpgrade perlUpgrade perl-core-DB_File-32bitUpgrade perl-core-DB_FileUpgrade perl-32bit | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | — | Upgrade perl (Ubuntu Pro)Upgrade perl | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub