CVE-2025-40919
BaseFortify
Publication date: 2025-07-16
Last updated on: 2025-07-16
Assigner: CPANSec
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| perl | authen_digestmd5 | 0.01 |
| perl | authen_digestmd5 | 0.02 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-340 | The product uses a scheme that generates numbers or identifiers that are more predictable than required. |
| CWE-338 | The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the Authen::DigestMD5 Perl module versions 0.01 through 0.02 generating the client nonce (cnonce) insecurely. The cnonce is created using an MD5 hash of the process ID (PID), the epoch time, and the built-in rand function. Since the PID comes from a small set of numbers, the epoch time can be guessed or leaked, and the built-in rand function is not suitable for cryptographic purposes, the resulting cnonce lacks sufficient entropy and can be predicted or reproduced by attackers. This weakens the security of the DigestMD5 authentication process.
How can this vulnerability impact me? :
Because the cnonce is generated insecurely with low entropy and predictable components, an attacker could potentially guess or reproduce the cnonce value. This undermines the mutual authentication process in DigestMD5, making it easier for attackers to perform chosen plaintext attacks or impersonate clients, thereby compromising the security of the authentication mechanism.