Threats Tagged 'cve-2026-75589'

Net::OAuth versions before 0.33 for Perl use a non-constant-time comparison when verifying HMAC-SHA1, HMAC-SHA256, and PLAINTEXT signatures. This timing discrepancy allows an attacker who can submit messages and measure response times to recover valid signatures byte-by-byte. The PLAINTEXT method is particularly vulnerable as it compares against the signature key itself, potentially exposing consumer_secret and token_secret. RSA-SHA1 verification is not affected. The vulnerability has a high severity with a CVSS score of 7.5.

Net::OAuth::Client versions before 0.32 for Perl have a critical vulnerability that allows silent downgrade from OAuth 1.0a to the less secure OAuth 1.0 during the get_request_token process. This downgrade happens without warning when the service provider omits the oauth_callback_confirmed parameter, causing the oauth_verifier parameter to be dropped from the access token request. This enables an attacker to perform OAuth 1.0 session fixation attacks by linking a victim's provider account to a session controlled by the attacker.