CVE-2025-1828

HIGH Year: 2025
CVSS v3 Score
8.8
High
Weakness Type
CWE-338
View all →

Vulnerability Description

Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon (egd) service is not available Crypt::Random will default to use the insecure Crypt::Random::rand provider. In particular, Windows versions of perl will encounter this issue by default.

Related Vulnerabilities

CVE-2017-8081

HIGH
CVSS:8.8(High)

Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via cal...

CWE-3382017

CVE-2022-26943

HIGH
CVSS:8.8(High)

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the p...

CWE-3382022

CVE-2022-45782

HIGH
CVSS:8.8(High)

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account...

CWE-3382022

CVE-2023-24828

HIGH
CVSS:8.8(High)

Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing nor...

CWE-3382023

CVE-2024-47126

HIGH
CVSS:8.8(High)

The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the bro...

CWE-3382024

CVE-2018-16115

CRITICAL
CVSS:9.1(Critical)

Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Ak...

CWE-3382018