The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:10218 advisory.

    Why? It's dependency free, requires zero configuration, and stands alone but it's maintainable and     extensible with plug-ins and friendly to shell scripting. When running, it requires only 10 MB of RAM.

    Security Fix(es):

    * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has a package installed that is affected by a vulnerability as referenced in the ALINUX3-SA-2024:0268 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-45321:
    The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code     execution for network attackers.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0373 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-45321:
    The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code     execution for network attackers.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9043:02 advisory.

    * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution     Vulnerability (CVE-2024-45321)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-9412:01 advisory.

    * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl-App-cpanminus package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code     execution for network attackers.(CVE-2024-45321)

Tenable has extracted the preceding description block directly from the EulerOS perl-App-cpanminus security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2024:10218 advisory.

    * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution Vulnerability (CVE-2024-45321)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9042:01 advisory.

    * perl-App-cpanminus: Insecure HTTP in App::cpanminus Allows Code Execution     Vulnerability (CVE-2024-45321)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
211906	RHEL 9 : perl-App-cpanminus (RHSA-2024:10218)	Nessus	Red Hat Local Security Checks	2024/11/27	2024/12/6	high
236044	Alibaba Cloud Linux 3 : 0268: perl-App-cpanminus:1.7044 (ALINUX3-SA-2024:0268)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
276132	TencentOS Server 4: perl-App-cpanminus (TSSA-2025:0373)	Nessus	Tencent Local Security Checks	2025/11/20	2025/12/4	high
292341	MiracleLinux 8 : perl-App-cpanminus:1.7044 (5.30) (AXSA:2024-9043:02)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
292611	MiracleLinux 9 : perl-App-cpanminus-1.7044-14.1.el9_5 (AXSA:2024-9412:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
214416	EulerOS 2.0 SP8 : perl-App-cpanminus (EulerOS-SA-2025-1127)	Nessus	Huawei Local Security Checks	2025/1/21	2025/1/21	high
232897	RockyLinux 9 : perl-App-cpanminus (RLSA-2024:10218)	Nessus	Rocky Linux Local Security Checks	2025/3/19	2025/3/19	high
292323	MiracleLinux 8 : perl-App-cpanminus:1.7044 (5.32) (AXSA:2024-9042:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high