Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 31, 2026 · NIST NVD

   Detected

   Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting credit card transaction data.

2. Jun 17, 2026 · NIST NVD

   Updated

   Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting credit card transaction data.

Affected

• cpe mock/business\

Sources

• CVE.orgVulnerability recordCVE-2025-15618

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-15618

  Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use.

  nvd.nist.gov

References

• Mailing List · openwall.com
• Product · metacpan.org
• Patch · security.metacpan.org