593 matches found
GHSA-CH4C-278Q-5654 rdiffweb Missing Custom Error Page
rdiffweb version 2.4.1 is set to a default and leaks error information. Version 2.4.2 fixes this issue...
rdiffweb Missing Custom Error Page
rdiffweb version 2.4.1 is set to a default and leaks error information. Version 2.4.2 fixes this issue...
rdiffweb contains Weak Password Requirements
rdiffweb version 2.4.1 has no password policy or password checking, which could make users vulnerable to brute force password guessing attacks. Version 2.4.2 enforces minimum and maximum password lengths...
GHSA-MP5P-G2JV-R8QW rdiffweb contains Weak Password Requirements
rdiffweb version 2.4.1 has no password policy or password checking, which could make users vulnerable to brute force password guessing attacks. Version 2.4.2 enforces minimum and maximum password lengths...
CVE-2022-3179
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3179
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-272
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2...
Sensitive Information Disclosure
Rdiffweb is vulnerable to Sensitive Information Disclosure. The vulnerability is due to session cookies instantiated without the "Secure" attribute. This flaw allows the transport of user cookies over insecure HTTP...
CVE-2022-3179 Weak Password Requirements in ikus060/rdiffweb
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3179
CVE-2022-3179 concerns weak password requirements in the rdiffweb project (ikus060/rdiffweb) prior to version 2.4.2. The issue is described across multiple sources as the software lacking a proper password policy, which could permit weak or easily guessable passwords and enable brute-force-style ...
CVE-2022-3179 Weak Password Requirements in ikus060/rdiffweb
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3174
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3175
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
Session fixation
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-271
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2...
PYSEC-2022-273
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2...
CVE-2022-3174
CVE-2022-3174 affects rdiffweb prior to 2.4.2, where cookies are transmitted over HTTPS without the Secure attribute, exposing confidentiality. The issue impacts the GitHub repo ikus060/rdiffweb; CVSS v3.1/3.0 base score 7.5 (HIGH) with network attacker, no user interaction. Affected component: s...