/ 
Catalyst-Plugin-Authentication-0.10026
/ Catalyst::Plugin::Authentication::Store::Minimal
Security Advisories (1)
CVE-2009-10007 (2026-06-09)

Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim.

NAME

Catalyst::Plugin::Authentication::Store::Minimal - Compatibility shim

DESCRIPTION

THIS IS A COMPATIBILITY SHIM. It allows old configurations of Catalyst Authentication to work without code changes.

DO NOT USE IT IN ANY NEW CODE!

Please see Catalyst::Authentication::Store::Minimal for more information.

METHODS

find_user
from_session
get_user
setup
user_supports