CVE-2022-4018

🗓️ 16 Nov 2022 00:00:00Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 77 Views

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. NV

Reporter	Title	Published	Views	Family All 15
Huntr	Attacker is able to bypass 2FA verification during 2FA disable due to application logic flaw	29 Sep 202219:25	–	huntr
CNNVD	Rdiffweb 访问控制错误漏洞	16 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb	16 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-0252	3 Oct 202520:07	–	euvd
Github Security Blog	Rdiffweb vulnerable to Missing Authentication for Critical Function	16 Nov 202219:00	–	github
NVD	CVE-2022-4018	16 Nov 202213:15	–	nvd
OSV	CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb	16 Nov 202200:00	–	osv
OSV	GHSA-4WPH-9VRM-6V3W Rdiffweb vulnerable to Missing Authentication for Critical Function	16 Nov 202219:00	–	osv
OSV	PYSEC-2022-43001	16 Nov 202213:15	–	osv
Prion	Authentication flaw	16 Nov 202213:15	–	prion

NVD

Node

ikus-soft rdiffwebRange≤2.4.10

ikus-soft rdiffwebMatch2.5.0alpha1

ikus-soft rdiffwebMatch2.5.0alpha2

ikus-soft rdiffwebMatch2.5.0alpha3

ikus-soft rdiffwebMatch2.5.0alpha4

ikus-soft rdiffwebMatch2.5.0alpha5

[
  {
    "vendor": "ikus060",
    "product": "ikus060/rdiffweb",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.5.0a6",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]