CPAN 2.28 allows Signature Verification Bypass.
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Comprehensive_perl_archive_network | Perl | 2.28 (including) | 2.28 (including) |
| Comprehensive_perl_archive_network | Perl | 2.28-trial (including) | 2.28-trial (including) |
| Perl | Ubuntu | bionic | * |
| Perl | Ubuntu | esm-infra/xenial | * |
| Perl | Ubuntu | focal | * |
| Perl | Ubuntu | hirsute | * |
| Perl | Ubuntu | impish | * |
| Perl | Ubuntu | jammy | * |
| Perl | Ubuntu | kinetic | * |
| Perl | Ubuntu | lunar | * |
| Perl | Ubuntu | trusty | * |
| Perl | Ubuntu | trusty/esm | * |
| Perl | Ubuntu | upstream | * |
| Perl | Ubuntu | xenial | * |