CVE-2026-46473 | BDVDB-2026-334408 Detail
TCHATZIAuthen::TOTP
Description#
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
Impact#
CAPEC-114 Authentication Abuse
Weaknesses#
- CWE-331 Insufficient Entropy
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.