Lucene search
Veracode Vulnerability DatabaseVERACODE:36608HistoryAug 05, 2022 - 7:21 a.m.
Information Disclosure
2022-08-0507:21:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
58.6%
raneto is vulnerable to information disclosure. The vulnerability exists in the credentials function in config.default.js due to password credentials stored in plaintext which allows an attacker to gain access to the system via brute-forcing the user password.
References
raneto.com/
cwe.mitre.org/data/definitions/521.html
gainsec.com/2022/08/04/cve-2022-35142-cve-2022-35143-cve-2022-35144/
github.com/gilbitron/Raneto/commit/900c58b53b60fabe54bf6f5227f04aac2e1ebeec
github.com/gilbitron/Raneto/issues/368
github.com/gilbitron/Raneto/pull/370
github.com/gilbitron/Raneto/releases
Related
github
github
Raneto v0.17.0 employs weak password complexity requirements
2022-08-05 00:00:23
cve
cve
CVE-2022-35143
2022-08-04 20:15:19
nvd
nvd
CVE-2022-35143
2022-08-04 20:15:19
prion
prion
Design/Logic Flaw
2022-08-04 20:15:00
cvelist
cvelist
CVE-2022-35143
2022-08-04 19:37:10
osv
osv
Raneto v0.17.0 employs weak password complexity requirements
2022-08-05 00:00:23
Raneto vulnerable to Cross-site Scripting
2022-08-05 00:00:23