Lucene search
Veracode Vulnerability DatabaseVERACODE:6868HistoryJun 28, 2018 - 5:40 a.m.
Man-in-the-Middle (MitM)
2018-06-2805:40:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.002 Low
EPSS
Percentile
51.5%
github.com/ncw/rclone is vulnerable to man-in-the-middle (MitM) attacks. The library does not validate any URLs passed from the Google Cloud Storage API server, allowing a malicious user to pass their own URL during the migration of data between two google cloud storage bucketsrclone sync command.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/ncw/rclone | le | v1.60.1 | |
| github.com/ncw/rclone | le | v1.60.1 |
Related
cve
cve
CVE-2018-12907
2018-06-27 13:29:00
osv
osv
CVE-2018-12907
2018-06-27 13:29:00
cvelist
cvelist
CVE-2018-12907
2018-06-27 13:00:00
nvd
nvd
CVE-2018-12907
2018-06-27 13:29:00
prion
prion
Design/Logic Flaw
2018-06-27 13:29:00