| Package | Affected versions | Patched versions |
|---|---|---|
| business | = 0.01 |
Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting credit card transaction data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free