ByteOS Network

NVD Vulnerability Details :

CVE-2024-57835

Awaiting Analysis

Source-9b29abf9-4ab0-4765-b253-1875cd9b441e

Published At-05 Apr, 2025 | 16:15

Updated At-07 Apr, 2025 | 19:15

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values. String::Random defaults to Perl's built-in predictable random number generator, the rand() function, which is not cryptographically secure

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weaknesses

CWE ID	Type	Source
CWE-338	Secondary	9b29abf9-4ab0-4765-b253-1875cd9b441e

References

Hyperlink	Source	Resource
https://metacpan.org/release/SHLOMIF/String-Random-0.32/source/lib/String/Random.pm#L377	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm#L235	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm#L255	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A
https://security.metacpan.org/docs/guides/random-data-for-security.html	9b29abf9-4ab0-4765-b253-1875cd9b441e	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History