CVE-2022-3268

CVE-2022-3268 concerns the Minarca project from ikus060, where versions prior to 4.2.2 suffer from weak password requirements. The root cause is inadequate password policy enforcement, enabling weak or easily guessable passwords. Impact is high for confidentiality, integrity, and availability per...

CVE-2022-3251

CVE-2022-3251 affects the Minarca project. Prior to version 4.2.2, a cookie used in HTTPS sessions was stored without the Secure attribute, enabling the cookie to be exposed in some scenarios. The issue is tied to the GitHub repository ikus060/minarca and is documented across multiple sources (in...