QwikSec

Security Database

CVE

CWE

Training

CVE-2026-6146

Published: May 11, 2026

Modified: May 13, 2026

PUBLISHED

Description

Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys. Amazon::Credentials stores credentials in an obfuscated form to prevent access to the secrets from a data dump of the object. Before version 1.3.0, the secrets were encrypted using a 64-bit key that was generated using the built-in rand function, which is predictable and unsuitable for cryptography.

Vendor	Product	Versions
BIGFOOT	Amazon::Credentials	affected `0 - <= 1.2.0`

Weaknesses (CWE)

References

https://metacpan.org/release/BIGFOOT/Amazon-Credentials-1.2.0/source/lib/Amazon/Credentials.pm#L1415-1418

https://metacpan.org/release/BIGFOOT/Amazon-Credentials-1.3.0/changes

release-notes

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.