There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the
    password generator has been producing weak passwords with much less entropy than advertised. The suggested
    passwords depend deterministically on the time the second rclone was started. This limits the entropy of
    the passwords enormously. These passwords are often used in the crypt backend for encryption of data. It
    would be possible to make a dictionary of all possible passwords with about 38 million entries per
    password length. This would make decryption of secret material possible with a plausible amount of effort.
    NOTE: all passwords generated by affected versions should be changed. (CVE-2020-28924)

遠端主機會受到 GLSA-202107-14 中所述的弱點影響 (rclone：產生弱式亂數)

    以 rclone 產生的密碼是以不安全的方式產生，容易遭受暴力密碼破解攻擊。
  影響：

    使用 rclone 產生的密碼加以保密的資料可能會洩漏給本機攻擊者。
  因應措施：

    目前尚無已知的因應措施。

远程主机会受到 GLSA-202107-14 中所述漏洞的影响（rclone：生成弱随机数）

    rclone 生成的密码不安全，而且容易受到暴力破解攻击。
  影响：

    使用 rclone 生成的密码进行保密的数据可能会被泄露给本地攻击者。
  变通方案：

    目前无任何已知的变通方案。

1.53.3への更新 CVE-2020-28924のセキュリティ修正

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Update to 1.53.3 Security fix for CVE-2020-28924

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202107-14 (rclone: Weak random number generation)

    Passwords generated with rclone were insecurely generated and are       vulnerable to brute-force attacks.
  Impact :

    Data kept secret with a password generated by rclone may be disclosed to       a local attacker.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
418826	SCA: security update for github.com/rclone/rclone (GHSA-rmw5-xpg9-jr29)	Tenable Self-Hosted Container Security	SCA Checks	1/23/2025	7/2/2026	high
418826	SCA: security update for github.com/rclone/rclone (GHSA-rmw5-xpg9-jr29)	Tenable Cloud Security	SCA Checks	1/23/2025	7/2/2026	high
157021	GLSA-202107-14：rclone：產生弱式亂數	Nessus	Gentoo Local Security Checks	1/24/2022	12/21/2023	high
157021	GLSA-202107-14：rclone：生成弱随机数	Nessus	Gentoo Local Security Checks	1/24/2022	12/21/2023	high
143289	openSUSEセキュリティ更新プログラム：rclone（openSUSE-2020-2008）	Nessus	SuSE Local Security Checks	11/30/2020	2/8/2024	high
143316	openSUSEセキュリティ更新プログラム：rclone（openSUSE-2020-2035）	Nessus	SuSE Local Security Checks	11/30/2020	2/7/2024	high
144246	Fedora 33：rclone（2020-3b0bb05117）	Nessus	Fedora Local Security Checks	12/15/2020	2/1/2024	high
144246	Fedora 33 : rclone (2020-3b0bb05117)	Nessus	Fedora Local Security Checks	12/15/2020	2/1/2024	high
143289	openSUSE Security Update : rclone (openSUSE-2020-2008)	Nessus	SuSE Local Security Checks	11/30/2020	2/8/2024	high
143316	openSUSE Security Update : rclone (openSUSE-2020-2035)	Nessus	SuSE Local Security Checks	11/30/2020	2/7/2024	high
157021	GLSA-202107-14 : rclone: Weak random number generation	Nessus	Gentoo Local Security Checks	1/24/2022	12/21/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high