CVE-2025-15618 - CVE House
Back to Database
Status published Unknown CVE-2025-15618

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key

Vulnerability Description

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting credit card transaction data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-15618

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

Business::OnlinePayment::StoredTransaction
Vulnerable Versions:
0

Timeline

Official Publish: March 31st, 2026
Last Modified: March 31st, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

CWE-338 CWE-693

MITRE ATT&CK TTPs

T1562 Impair Defenses
Defense Evasion
T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1550 Use Alternate Authentication Material
Defense Evasion
T1485 Data Destruction
Impact