CVE Vulnerabilities

CVE-2020-16154

Improper Verification of Cryptographic Signature

Published: Dec 13, 2021 | Modified: Nov 07, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
7.8 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM

The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.

Weakness

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

Affected Software

Name Vendor Start Version End Version
App::cpanminus App::cpanminus_project 1.7044 (including) 1.7044 (including)
Cpanminus Ubuntu bionic *
Cpanminus Ubuntu esm-apps/bionic *
Cpanminus Ubuntu esm-apps/focal *
Cpanminus Ubuntu esm-apps/xenial *
Cpanminus Ubuntu focal *
Cpanminus Ubuntu hirsute *
Cpanminus Ubuntu impish *
Cpanminus Ubuntu jammy *
Cpanminus Ubuntu trusty *
Cpanminus Ubuntu upstream *
Cpanminus Ubuntu xenial *

References