CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-CPAN | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-libsUpgrade perl-develUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-PieceUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perl-Pod-EscapesUpgrade perl-testsUpgrade perl-ExtUtils-InstallUpgrade perl-debuginfoUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perlUpgrade perl-CPANUpgrade perl-Module-LoadedUpgrade perl-core | May 17, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-fieldsUpgrade perl-IO-debuginfoUpgrade perl-BenchmarkUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-TieUpgrade perl-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-Thread-SemaphoreUpgrade perl-SymbolUpgrade perl-TimeUpgrade perl-Time-PieceUpgrade perlUpgrade perl-Tie-MemoizeUpgrade perl-diagnosticsUpgrade perl-Pod-HtmlUpgrade perl-ErrnoUpgrade perl-Term-ReadLineUpgrade perl-Unicode-UCDUpgrade perl-overloadUpgrade perl-GDBM_File-debuginfoUpgrade perl-localeUpgrade perl-NetUpgrade perl-I18N-LangTagsUpgrade perl-openUpgrade perl-sortUpgrade perl-Time-Piece-debuginfoUpgrade perl-ifUpgrade perl-interpreterUpgrade perl-baseUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IOUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Getopt-StdUpgrade perl-IPC-Open3Upgrade perl-Hash-Util-FieldHashUpgrade perl-File-statUpgrade perl-libs-debuginfoUpgrade perl-File-BasenameUpgrade perl-MemoizeUpgrade perl-FileHandleUpgrade perl-Term-CompleteUpgrade perl-mroUpgrade perl-DirHandleUpgrade perl-ExtUtils-ConstantUpgrade perl-File-CompareUpgrade perl-lessUpgrade perl-Hash-Util-debuginfoUpgrade perl-filetestUpgrade perl-interpreter-debuginfoUpgrade perl-Tie-FileUpgrade perl-BUpgrade perl-vmsishUpgrade perl-macrosUpgrade perl-ThreadUpgrade perl-Sys-HostnameUpgrade perl-FcntlUpgrade perl-ExtUtils-EmbedUpgrade perl-ODBM_FileUpgrade perl-SafeUpgrade perl-Module-LoadedUpgrade perl-libnetcfgUpgrade perl-meta-notationUpgrade perl-CPAN-testsUpgrade perl-autouseUpgrade perl-DumpvalueUpgrade perl-Search-DictUpgrade perl-POSIXUpgrade perl-Math-ComplexUpgrade perl-I18N-CollateUpgrade perl-FileCacheUpgrade perl-Fcntl-debuginfoUpgrade perl-CPANUpgrade perl-Class-StructUpgrade perl-phUpgrade perl-NDBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-NDBM_FileUpgrade perl-debugsourceUpgrade perl-develUpgrade perl-libUpgrade perl-TestUpgrade perl-File-CopyUpgrade perl-SelfLoaderUpgrade perl-docUpgrade perl-EnglishUpgrade perl-Attribute-HandlersUpgrade perl-Hash-UtilUpgrade perl-Pod-FunctionsUpgrade perl-utilsUpgrade perl-DBM_FilterUpgrade perl-sigtrapUpgrade perl-OpcodeUpgrade perl-overloadingUpgrade perl-encoding-warningsUpgrade perl-User-pwentUpgrade perl-ODBM_File-debuginfoUpgrade perl-varsUpgrade perl-Text-AbbrevUpgrade perl-AutoLoaderUpgrade perl-DynaLoaderUpgrade perl-Devel-SelfStubberUpgrade perl-AutoSplitUpgrade perl-testsUpgrade perl-subsUpgrade perl-NEXTUpgrade perl-GDBM_FileUpgrade perl-File-FindUpgrade perl-ExtUtils-MiniperlUpgrade perl-SelectSaverUpgrade perl-libsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-FindBinUpgrade perl-I18N-LanginfoUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Devel-PeekUpgrade perl-deprecateUpgrade perl-debuggerUpgrade perl-Config-ExtensionsUpgrade perl-B-debuginfoUpgrade perl-blibUpgrade perl-POSIX-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-I18N-Langinfo-debuginfo | Feb 17, 2025 | Apr 29, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perl | Oct 23, 2024 | Apr 29, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade perl-libsUpgrade perl | Jul 18, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-IO-ZlibUpgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-develUpgrade perl-testsUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-CPANUpgrade perl-Module-LoadedUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilder | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perl-develUpgrade perl-CPANUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-InstallUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-Module-LoadedNo solution existsUpgrade perl-macrosUpgrade perlUpgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-coreUpgrade perl-Object-AccessorUpgrade perl-libsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-CoreList | Nov 8, 2023 | Apr 29, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 29, 2023 |
| Suse | — | Upgrade perlUpgrade perl-base-32bitUpgrade perl-docUpgrade perl-baseUpgrade perl-32bitUpgrade perl-core-DB_FileUpgrade perl-core-DB_File-32bit | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | — | Upgrade perlUpgrade perl (Ubuntu Pro) | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub