Get real-time updates on Telegram
P5
CVE-2024-57835: Amon2::Auth::Site::LINE versions through 0.04 for Perl uses insecure rand() function for cryptographic functions
CVE-2024-57835. EPSS 0.00287 (percentile 0.2014), scored 24-Oct-2026. Fixed version: cb3ac40942b86dc10e4a798c1548a57394a581c0.
Affected technology
Amon2::Auth::Site::LINE · versions through 0.04 for Perl uses insecure rand() function for cryptographic functions
Vendor not specified by the source
Component: Not specified by the source
Function: for
Attack conditions (OSV, CVSS 3.1): Network (remote) · Low privileges required · User interaction required
What an attacker can do
OSV’s CVSS 3.1 assessment rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 0.1 /100 (P5)
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L · OSV.dev
- EPSS
- 0.00287 · percentile 0.2014 · 2026-10-24
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-25 01:59:11.642217+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2024-57835.html