Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:37443
HistoryOct 07, 2022 - 11:20 a.m.

Information Disclosure

2022-10-0711:20:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
rdiffweb
information disclosure
rate limit
password change
vulnerability
software

EPSS

0.002

Percentile

57.1%

JSON

rdiffweb is vulnerable to Information Disclosure. The vulnerability is due to not having a rate limit on the password change feature which allows an attacker to bruteforce the existing password and set a new password.

Related

prion 1
osv 2
cvelist 1
github 1
huntr 1
nvd 1
cve 1
prion
prion
Design/Logic Flaw
2022-10-06 18:16:00
osv
osv
rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks
2022-10-06 18:52:04
CVE-2022-3273
2022-10-06 18:16:20
cvelist
cvelist
CVE-2022-3273 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
2022-10-06 00:00:00
github
github
rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks
2022-10-06 18:52:04
huntr
huntr
No rate limit on old password parameter allows attacker to bruteforce the existing password and set a new password
2022-09-22 15:37:04
nvd
nvd
CVE-2022-3273
2022-10-06 18:16:20
cve
cve
CVE-2022-3273
2022-10-06 18:16:20

EPSS

0.002

Percentile

57.1%

JSON
Related for VERACODE:37443
prion1osv2cvelist1github1huntr1nvd1cve1