Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-082 advisory.

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

    Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-205 advisory.

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

    Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
417049	SCA: security update for rdiffweb (GHSA-mp5p-g2jv-r8qw)	Tenable Cloud Security	SCA Checks	high
417049	SCA: security update for rdiffweb (GHSA-mp5p-g2jv-r8qw)	Tenable Self-Hosted Container Security	SCA Checks	high
173109	Amazon Linux 2023 : python3-bottle (ALAS2023-2023-082)	Nessus	Amazon Linux Local Security Checks	critical
166987	Amazon Linux 2022 : python3-bottle (ALAS2022-2022-205)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-3179

high

Tenable Plugins

high

high

critical

critical