Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38077
HistoryNov 17, 2022 - 11:02 a.m.

Authentication Bypass

2022-11-1711:02:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
rdiffweb
authentication bypass
2fa
local attacker
config.py.

EPSS

0.001

Percentile

37.9%

JSON

rdiffweb is vulnerable to authentication bypass. The vulnerability exits in config.py, because the application does not ask for 2FA during the user email change, allowing a local attacker to turn of 2FA on an account.

Related

osv 3
prion 1
huntr 1
nvd 1
github 1
cvelist 1
cve 1
osv
osv
Rdiffweb vulnerable to Missing Authentication for Critical Function
2022-11-16 19:00:32
PYSEC-2022-43001
2022-11-16 13:15:00
CVE-2022-4018
2022-11-16 13:15:10
prion
prion
Authentication flaw
2022-11-16 13:15:00
huntr
huntr
Attacker is able to bypass 2FA verification during 2FA disable due to application logic flaw
2022-09-29 19:25:46
nvd
nvd
CVE-2022-4018
2022-11-16 13:15:10
github
github
Rdiffweb vulnerable to Missing Authentication for Critical Function
2022-11-16 19:00:32
cvelist
cvelist
CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb
2022-11-16 00:00:00
cve
cve
CVE-2022-4018
2022-11-16 13:15:10

EPSS

0.001

Percentile

37.9%

JSON
Related for VERACODE:38077
osv3prion1huntr1nvd1github1cvelist1cve1