CVE-2026-6146
概要

Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys.

Amazon::Credentials stores credentials in an obfuscated form to prevent access to the secrets from a data dump of the object.

Before version 1.3.0, the secrets were encrypted using a 64-bit key that was generated using the built-in rand function, which is predictable and unsuitable for cryptography.

公表日 2026年5月12日5:25
登録日 2026年5月13日4:10
最終更新日 2026年5月13日1:48
関連情報、対策とツール
共通脆弱性一覧