cve-2023-31486.md

sidebar_label	title	description	hide_table_of_contents	sidebar_class_name	toc_max_heading_level	tags
CVE-2023-31486	CVE-2023-31486	Lifecycle of CVE-2023-31486	true	hide-from-sidebar	2	security cve

CVE Details

CVE-2023-31486

Last Update

11/7/24

NIST CVE Summary

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

CVE Severity

8.1

Status

Ongoing

Affected Products & Versions

• Palette Enterprise 4.5.3, 4.5.8
• Palette VerteX 4.5.3, 4.5.8

Revision History

• 1.0 10/14/24 Initial Publication
• 2.0 10/14/2024 Added Palette Enterprise & Palette VerteX 4.5.3 to Affected Products
• 3.0 11/7/2024 Added Palette Enterprise & Palette VerteX 4.5.8 to Affected Products