CVE Catalog
CVE-2026-5091
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk0.20%
10th percentile - higher than 10% of all known CVEs
Summary
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.
Risk Assessment
An attacker can use timing discrepancies to guess passwords or hashes, potentially leading to unauthorized access.
Recommendation
Update Catalyst::Plugin::Authentication to a version above 0.10024 or apply a patch.
Original NVD description (English source)
Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash or password.