« Volver al listado

CVE-2025-40920

Estado: AplazadaAlta (8.6)—
Detalles técnicos trazas, registros y código del informe original
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library.
  *  Data::UUID does not use a strong cryptographic source for generating UUIDs.
  *  Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562.
  *  The nonces should be generated from a strong cryptographic source, as per RFC 7616.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Generación débil de nonces en autenticación HTTP remota (AV:N/PR:N) permite predicción de credenciales; CWE-338/340 indican fallo criptográfico para autenticación.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Application Developer GuidancePrivileged Account ManagementApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareActive Directory Configuration

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Perl — Catalyst Authentication Credential HttpAIPerl — Data UuidAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-40920",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-40920",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-08-11T20:52:17.823708Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.6,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 4.7,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "affectedData": [
        {
          "repo": "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP",
          "vendor": "ETHER",
          "product": "Catalyst::Authentication::Credential::HTTP",
          "versions": [
            {
              "status": "affected",
              "version": "0.06",
              "versionType": "custom",
              "lessThanOrEqual": "1.018"
            }
          ],
          "packageName": "Catalyst-Authentication-Credential-HTTP",
          "collectionURL": "https://cpan.org/modules",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-08-11T21:15:28.087",
  "references": [
    {
      "url": "https://datatracker.ietf.org/doc/html/rfc7616#section-5.12",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://datatracker.ietf.org/doc/html/rfc9562#name-security-considerations",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/commit/ad2c03aad95406db4ce35dfb670664ebde004c18",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://github.com/perl-catalyst/Catalyst-Authentication-Credential-HTTP/pull/1",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://metacpan.org/release/ETHER/Catalyst-Authentication-Credential-HTTP-1.018/source/lib/Catalyst/Authentication/Credential/HTTP.pm#L391",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "https://security.metacpan.org/patches/C/Catalyst-Authentication-Credential-HTTP/1.018/CVE-2025-40920-r1.patch",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2025/08/12/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
      "description": [
        {
          "lang": "en",
          "value": "CWE-338"
        },
        {
          "lang": "en",
          "value": "CWE-340"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library.\n  *  Data::UUID does not use a strong cryptographic source for generating UUIDs.\n  *  Data::UUID returns v3 UUIDs, which are generated from known information and are unsuitable for security, as per RFC 9562.\n  *  The nonces should be generated from a strong cryptographic source, as per RFC 7616."
    },
    {
      "lang": "es",
      "value": "Las versiones 1.018 y anteriores de Catalyst::Authentication::Credential::HTTP para Perl generan nonces mediante la librería Data::UUID de Perl. * Data::UUID no utiliza una fuente criptográfica robusta para generar UUID. * Data::UUID devuelve UUID v3, que se generan a partir de información conocida y no son adecuados para la seguridad, según RFC 9562. * Los nonces deben generarse a partir de una fuente criptográfica robusta, según RFC 7616."
    }
  ],
  "lastModified": "2026-06-17T09:22:17.803",
  "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e"
}