CVE-2010-4334: Io-Socket-SSL

Medium severity, CVSS 4.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The IO::Socket::SSL module 1.35 for Perl, when verify_mode is not VERIFY_NONE, fails open to VERIFY_NONE instead of throwing an error when a ca_file/ca_path cannot be verified, which allows remote attackers to bypass intended certificate restrictions.

Affected products

• Io-Socket-SSL Io-Socket-SSL: version 1.35 only

Published 2011-01-14. Last modified 2026-06-16.