Bottle before 0.12.20 mishandles errors during early request binding.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5532-2 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-082 advisory.

  - Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-205 advisory.

  - Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1844 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3103-1 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5532-1 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5159 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3048 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183714	Ubuntu 16.04 ESM : Bottle vulnerability (USN-5532-2)	Nessus	Ubuntu Local Security Checks	critical
173109	Amazon Linux 2023 : python3-bottle (ALAS2023-2023-082)	Nessus	Amazon Linux Local Security Checks	critical
166987	Amazon Linux 2022 : (ALAS2022-2022-205)	Nessus	Amazon Linux Local Security Checks	critical
165098	Amazon Linux 2 : python-bottle (ALAS-2022-1844)	Nessus	Amazon Linux Local Security Checks	critical
164920	SUSE SLED15 / SLES15 Security Update : python-bottle (SUSE-SU-2022:3103-1)	Nessus	SuSE Local Security Checks	critical
163454	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bottle vulnerability (USN-5532-1)	Nessus	Ubuntu Local Security Checks	critical
162013	Debian DSA-5159-1 : python-bottle - security update	Nessus	Debian Local Security Checks	critical
161962	Debian DLA-3048-1 : python-bottle - LTS security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2022-31799

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical