CVE-2020-16156
Description
CPAN 2.28 allows Signature Verification Bypass.
Risk Information
Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.021
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Practical Extraction and Report Language (USN-5689-1) perl_5.26.1-6ubuntu0.6_i386.deb | Linux |
| Practical Extraction and Report Language (USN-5689-1) perl_5.26.1-6ubuntu0.6_amd64.deb | Linux |
| Practical Extraction and Report Language (USN-5689-1) perl_5.30.0-9ubuntu0.3_i386.deb | Linux |
| Practical Extraction and Report Language (USN-5689-1) perl_5.30.0-9ubuntu0.3_amd64.deb | Linux |
| Practical Extraction and Report Language (USN-5689-1) perl_5.34.0-3ubuntu1.1_i386.deb | Linux |
| Practical Extraction and Report Language (USN-5689-1) perl_5.34.0-3ubuntu1.1_amd64.deb | Linux |
| Practical Extraction and Report Language (USN-5689-2) perl_5.34.0-5ubuntu1.1_i386.deb | Linux |
| Practical Extraction and Report Language (USN-5689-2) perl_5.34.0-5ubuntu1.1_amd64.deb | Linux |
| (RHSA-2025:8432)Moderate: security update perl-CPAN-2.18-402.el8_10.noarch.rpm | Linux |
| Moderate: perl-CPAN security update perl-CPAN-2.18-402.el8_10.noarch.rpm | Linux |
| Perl-CPAN update (ELSA-2025-8432) perl-CPAN-2.18-402.el8_10.noarch.rpm | Linux |
| Improper Verification of Cryptographic Signature Vulnerability (CVE-2020-16156) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234