Vulnerabilities

TI-2022-02934 CVE-2022-3179 · GHSA-mp5p-g2jv-r8qw

Weak Password Requirements in ikus060/rdiffweb

MEDIUM 40

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01002 Published 2022-09-13 Fixed in 2.4.2 CWE-521

TI-2022-02930 CVE-2022-3174 · GHSA-mjw4-xvx6-3grg

LOW 34

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00721 Published 2022-09-13 Fixed in 2.4.2 CWE-614

TI-2022-02931 CVE-2022-3175 · GHSA-ch4c-278q-5654

LOW 26

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00887 Published 2022-09-13 Fixed in 2.4.2 CWE-756