CyberRota Analysis
AI analysis pending.
CVE
CVE-2010-4334
Severity
MEDIUM
CVSS
4
EPSS
1.78%
Original NVD Description
The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.