Lucene search
MitreCVELIST:CVE-2023-31486HistoryApr 28, 2023 - 12:00 a.m.
CVE-2023-31486
2023-04-2800:00:00
mitre
www.cve.org
1
http::tiny
cve-2023-31486
insecure
tls
certificates
HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.
References
www.openwall.com/lists/oss-security/2023/04/29/1
www.openwall.com/lists/oss-security/2023/05/03/3
www.openwall.com/lists/oss-security/2023/05/03/5
www.openwall.com/lists/oss-security/2023/05/07/2
blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/
github.com/chansen/p5-http-tiny/pull/153
hackeriet.github.io/cpan-http-tiny-overview/
www.openwall.com/lists/oss-security/2023/04/18/14
www.openwall.com/lists/oss-security/2023/05/03/4
www.reddit.com/r/perl/comments/111tadi/psa_httptiny_disabled_ssl_verification_by_default/
Related
nessus
nessus
Amazon Linux AMI : perl-HTTP-Tiny (ALAS-2023-1771)
2023-07-03 00:00:00
EulerOS 2.0 SP9 : perl-HTTP-Tiny (EulerOS-SA-2023-2625)
2023-08-08 00:00:00
RHEL 9 : perl-HTTP-Tiny (RHSA-2023:6542)
2023-11-07 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Perl HTTP [CVE-2023-31486]
2024-02-29 20:30:14
oraclelinux
oraclelinux
perl-HTTP-Tiny security update
2023-11-17 00:00:00
perl-HTTP-Tiny security update
2023-11-11 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for perl-HTTP-Tiny (EulerOS-SA-2023-2796)
2023-09-11 00:00:00
Huawei EulerOS: Security Advisory for perl-HTTP-Tiny (EulerOS-SA-2023-2867)
2023-09-20 00:00:00
Huawei EulerOS: Security Advisory for perl-HTTP-Tiny (EulerOS-SA-2023-2994)
2023-10-13 00:00:00
almalinux
almalinux
Moderate: perl-HTTP-Tiny security update
2023-11-07 00:00:00
Moderate: perl-HTTP-Tiny security update
2023-11-14 00:00:00
redhatcve
redhatcve
CVE-2023-31486
2023-08-02 10:49:43
cbl_mariner
cbl_mariner
CVE-2023-31486 affecting package perl for versions less than 5.34.1-489
2022-10-21 20:42:47
CVE-2023-31486 affecting package perl 5.30.3-2
2023-07-28 23:16:55
ubuntucve
ubuntucve
CVE-2023-31486
2023-04-29 00:00:00
redhat
redhat
(RHSA-2023:6542) Moderate: perl-HTTP-Tiny security update
2023-11-07 06:08:08
(RHSA-2024:0422) Moderate: perl-HTTP-Tiny security update
2024-01-24 14:40:28
(RHSA-2023:7174) Moderate: perl-HTTP-Tiny security update
2023-11-14 08:46:59
amazon
amazon
Important: perl-HTTP-Tiny
2023-06-21 19:11:00
Important: perl-Pod-Perldoc
2023-06-21 19:11:00
Important: perl-HTTP-Tiny
2023-06-21 19:11:00
cve
cve
CVE-2023-31486
2023-04-29 00:15:09
rocky
rocky
perl-HTTP-Tiny bug fix update
2024-04-05 14:55:53
prion
prion
Default configuration
2023-04-29 00:15:00
osv
osv
Moderate: perl-HTTP-Tiny security update
2023-11-07 00:00:00
CVE-2023-31486
2023-04-29 00:15:09
Moderate: perl-HTTP-Tiny security update
2023-11-14 00:00:00
debiancve
debiancve
CVE-2023-31486
2023-04-29 00:15:09
veracode
veracode
Improper Certificate Validation
2024-01-15 11:19:28
nvd
nvd
CVE-2023-31486
2023-04-29 00:15:09
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0431
2023-07-19 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0054
2023-07-19 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0617
2023-07-25 00:00:00
aix
aix
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00