Vulnerability in Io-Socket-Ssl

CVE-2010-4334

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.018 (75.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References