CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-CPAN | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-debuginfoUpgrade perl-Module-CoreListUpgrade perl-coreUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-CBuilderUpgrade perl-testsUpgrade perl-Pod-EscapesUpgrade perlUpgrade perl-CPANUpgrade perl-Module-LoadedUpgrade perl-Package-ConstantsUpgrade perl-libsUpgrade perl-develUpgrade perl-Object-AccessorUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-Piece | May 17, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-SelectSaverUpgrade perl-subsUpgrade perl-NEXTUpgrade perl-testsUpgrade perl-File-CopyUpgrade perl-libsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-TestUpgrade perl-SelfLoaderUpgrade perl-ExtUtils-MiniperlUpgrade perl-File-FindUpgrade perl-I18N-LanginfoUpgrade perl-FindBinUpgrade perl-docUpgrade perl-libUpgrade perl-Opcode-debuginfoUpgrade perl-GDBM_FileUpgrade perl-POSIX-debuginfoUpgrade perl-B-debuginfoUpgrade perl-blibUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Class-StructUpgrade perl-Pod-FunctionsUpgrade perl-utilsUpgrade perl-sigtrapUpgrade perl-Attribute-HandlersUpgrade perl-debuggerUpgrade perl-OpcodeUpgrade perl-CPAN-testsUpgrade perl-Hash-UtilUpgrade perl-File-DosGlob-debuginfoUpgrade perl-DBM_FilterUpgrade perl-Devel-PeekUpgrade perl-encoding-warningsUpgrade perl-ODBM_File-debuginfoUpgrade perl-EnglishUpgrade perl-NDBM_FileUpgrade perl-File-DosGlobUpgrade perl-User-pwentUpgrade perl-DynaLoaderUpgrade perl-varsUpgrade perl-phUpgrade perl-AutoSplitUpgrade perl-AutoLoaderUpgrade perl-Devel-SelfStubberUpgrade perl-Text-AbbrevUpgrade perl-NDBM_File-debuginfoUpgrade perl-autouseUpgrade perl-debugsourceUpgrade perl-CPANUpgrade perl-overloadingUpgrade perl-DumpvalueUpgrade perl-FileCacheUpgrade perl-I18N-CollateUpgrade perl-Fcntl-debuginfoUpgrade perl-POSIXUpgrade perl-Math-ComplexUpgrade perl-develUpgrade perl-Search-DictUpgrade perl-I18N-LangTagsUpgrade perl-debuginfoUpgrade perl-localeUpgrade perlUpgrade perl-ifUpgrade perl-MemoizeUpgrade perl-IOUpgrade perl-FileHandleUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Term-CompleteUpgrade perl-mroUpgrade perl-File-statUpgrade perl-macrosUpgrade perl-File-CompareUpgrade perl-Locale-Maketext-SimpleUpgrade perl-interpreter-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-DirHandleUpgrade perl-Tie-FileUpgrade perl-ThreadUpgrade perl-ExtUtils-ConstantUpgrade perl-Sys-HostnameUpgrade perl-ErrnoUpgrade perl-lessUpgrade perl-filetestUpgrade perl-BUpgrade perl-Time-Piece-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-sortUpgrade perl-ODBM_FileUpgrade perl-mro-debuginfoUpgrade perl-vmsishUpgrade perl-FcntlUpgrade perl-Module-LoadedUpgrade perl-libnetcfgUpgrade perl-interpreterUpgrade perl-diagnosticsUpgrade perl-Tie-MemoizeUpgrade perl-Pod-HtmlUpgrade perl-libs-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perl-File-BasenameUpgrade perl-Getopt-StdUpgrade perl-baseUpgrade perl-IPC-Open3Upgrade perl-Hash-Util-FieldHashUpgrade perl-overloadUpgrade perl-meta-notationUpgrade perl-IO-debuginfoUpgrade perl-fieldsUpgrade perl-SymbolUpgrade perl-BenchmarkUpgrade perl-TimeUpgrade perl-Time-PieceUpgrade perl-openUpgrade perl-SafeUpgrade perl-ExtUtils-EmbedUpgrade perl-Unicode-UCDUpgrade perl-TieUpgrade perl-Thread-SemaphoreUpgrade perl-Term-ReadLineUpgrade perl-Net | Feb 17, 2025 | Apr 29, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perl | Oct 23, 2024 | Apr 29, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade perlUpgrade perl-libs | Jul 18, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade perlUpgrade perl-libs | Jan 10, 2024 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-coreUpgrade perl-Module-LoadedUpgrade perlUpgrade perl-ExtUtils-CBuilderUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Object-AccessorUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-develUpgrade perl-libsUpgrade perl-tests | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade perl-libsUpgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-Object-AccessorUpgrade perl-IO-ZlibUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-CPANUpgrade perlUpgrade perl-Module-LoadedNo solution existsUpgrade perl-develUpgrade perl-Time-PieceUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-macrosUpgrade perl-Package-ConstantsUpgrade perl-debuginfoUpgrade perl-ExtUtils-Install | Nov 8, 2023 | Apr 29, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 29, 2023 |
| Suse | — | Upgrade perl-core-DB_FileUpgrade perl-32bitUpgrade perl-core-DB_File-32bitUpgrade perl-docUpgrade perl-base-32bitUpgrade perlUpgrade perl-base | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | — | Upgrade perlUpgrade perl (Ubuntu Pro) | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub