CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-CPAN | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perlUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-InstallUpgrade perl-debuginfoUpgrade perl-coreUpgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-macrosUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perl-develUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-libs | May 17, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-Fcntl-debuginfoUpgrade perl-CPANUpgrade perl-DumpvalueUpgrade perl-FileCacheUpgrade perl-testsUpgrade perl-SelectSaverUpgrade perl-subsUpgrade perl-File-FindUpgrade perl-Math-ComplexUpgrade perl-POSIXUpgrade perl-User-pwentUpgrade perl-autouseUpgrade perl-overloadingUpgrade perl-encoding-warningsUpgrade perl-GDBM_FileUpgrade perl-DBM_FilterUpgrade perl-ODBM_File-debuginfoUpgrade perl-OpcodeUpgrade perl-NEXTUpgrade perl-Search-DictUpgrade perl-libsUpgrade perl-I18N-CollateUpgrade perl-CPAN-testsUpgrade perl-Class-StructUpgrade perl-debuggerUpgrade perl-deprecateUpgrade perl-Attribute-HandlersUpgrade perl-EnglishUpgrade perl-utilsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-ExtUtils-MiniperlUpgrade perl-Hash-UtilUpgrade perl-Pod-FunctionsUpgrade perl-B-debuginfoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Config-ExtensionsUpgrade perl-FindBinUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-NDBM_FileUpgrade perl-NDBM_File-debuginfoUpgrade perl-AutoLoaderUpgrade perl-I18N-LanginfoUpgrade perl-varsUpgrade perl-POSIX-debuginfoUpgrade perl-AutoSplitUpgrade perl-blibUpgrade perl-sigtrapUpgrade perl-Text-AbbrevUpgrade perl-TestUpgrade perl-File-DosGlobUpgrade perl-DynaLoaderUpgrade perl-debugsourceUpgrade perl-Devel-SelfStubberUpgrade perl-Opcode-debuginfoUpgrade perl-phUpgrade perl-File-CopyUpgrade perl-libUpgrade perl-develUpgrade perl-docUpgrade perl-SelfLoaderUpgrade perl-Sys-HostnameUpgrade perl-baseUpgrade perl-Thread-SemaphoreUpgrade perl-FcntlUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Hash-Util-debuginfoUpgrade perl-File-CompareUpgrade perl-ExtUtils-ConstantUpgrade perl-ThreadUpgrade perl-Getopt-StdUpgrade perl-IOUpgrade perl-IPC-Open3Upgrade perl-interpreter-debuginfoUpgrade perl-sortUpgrade perl-ODBM_FileUpgrade perl-Time-Piece-debuginfoUpgrade perl-filetestUpgrade perl-BUpgrade perl-TimeUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-lessUpgrade perl-mro-debuginfoUpgrade perl-Time-PieceUpgrade perl-Unicode-UCDUpgrade perl-TieUpgrade perl-Term-ReadLineUpgrade perl-NetUpgrade perl-localeUpgrade perl-ifUpgrade perl-I18N-LangTagsUpgrade perl-debuginfoUpgrade perlUpgrade perl-openUpgrade perl-fieldsUpgrade perl-BenchmarkUpgrade perl-SymbolUpgrade perl-SafeUpgrade perl-meta-notationUpgrade perl-IO-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-overloadUpgrade perl-MemoizeUpgrade perl-interpreterUpgrade perl-File-BasenameUpgrade perl-GDBM_File-debuginfoUpgrade perl-ErrnoUpgrade perl-Tie-MemoizeUpgrade perl-diagnosticsUpgrade perl-Pod-HtmlUpgrade perl-libs-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-FileHandleUpgrade perl-File-statUpgrade perl-mroUpgrade perl-Term-CompleteUpgrade perl-Module-LoadedUpgrade perl-vmsishUpgrade perl-libnetcfgUpgrade perl-Tie-FileUpgrade perl-Hash-Util-FieldHashUpgrade perl-DirHandle | Feb 17, 2025 | Apr 29, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perl | Oct 23, 2024 | Apr 29, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade perl-libsUpgrade perl | Jul 18, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-libsUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-testsUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-Pod-EscapesUpgrade perl-coreUpgrade perlUpgrade perl-ExtUtils-CBuilderUpgrade perl-Object-AccessorUpgrade perl-macrosUpgrade perl-Time-PieceUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-Loaded | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perl-libsUpgrade perl-Module-CoreListUpgrade perl-testsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-Module-LoadedUpgrade perl-Time-PieceUpgrade perl-ExtUtils-CBuilderUpgrade perl-develUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perlUpgrade perl-macrosUpgrade perl-ExtUtils-InstallUpgrade perl-debuginfoNo solution existsUpgrade perl-CPANUpgrade perl-ExtUtils-Embed | Nov 8, 2023 | Apr 29, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 29, 2023 |
| Suse | — | Upgrade perl-core-DB_FileUpgrade perl-core-DB_File-32bitUpgrade perl-32bitUpgrade perl-base-32bitUpgrade perlUpgrade perl-docUpgrade perl-base | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | — | Upgrade perl (Ubuntu Pro)Upgrade perl | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub