It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-082 advisory.

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

    Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1844 advisory.

    Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5532-2 advisory.

    USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04     ESM and Ubuntu 16.04 ESM



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5532-1 advisory.

    It was discovered that Bottle incorrectly handled errors during early request

    binding. An attacker could possibly use this issue to disclose sensitive

    information. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3103-1 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-3048 advisory.

  - Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5159 advisory.

    Elton Nokaj discovered that incorrect error handling in Bottle, a WSGI framework for Python, could result     in the disclosure of sensitive information. For the oldstable distribution (buster), this problem has been     fixed in version 0.12.15-2+deb10u2. For the stable distribution (bullseye), this problem has been fixed in     version 0.12.19-1+deb11u1. We recommend that you upgrade your python-bottle packages. For the detailed     security status of python-bottle please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/python-bottle

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-205 advisory.

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. (CVE-2022-3179)

    Bottle before 0.12.20 mishandles errors during early request binding. (CVE-2022-31799)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
173109	Amazon Linux 2023 : python3-bottle (ALAS2023-2023-082)	Nessus	Amazon Linux Local Security Checks	3/21/2023	12/11/2024	critical
165098	Amazon Linux 2 : python-bottle (ALAS-2022-1844)	Nessus	Amazon Linux Local Security Checks	9/15/2022	12/11/2024	critical
183714	Ubuntu 16.04 ESM : Bottle vulnerability (USN-5532-2)	Nessus	Ubuntu Local Security Checks	10/23/2023	10/29/2024	critical
163454	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bottle vulnerability (USN-5532-1)	Nessus	Ubuntu Local Security Checks	7/26/2022	8/29/2024	critical
164920	SUSE SLED15 / SLES15 Security Update : python-bottle (SUSE-SU-2022:3103-1)	Nessus	SuSE Local Security Checks	9/9/2022	7/14/2023	critical
161962	Debian DLA-3048-1 : python-bottle - LTS security update	Nessus	Debian Local Security Checks	6/8/2022	6/14/2022	critical
162013	Debian DSA-5159-1 : python-bottle - security update	Nessus	Debian Local Security Checks	6/10/2022	1/24/2025	critical
166987	Amazon Linux 2022 : python3-bottle (ALAS2022-2022-205)	Nessus	Amazon Linux Local Security Checks	11/4/2022	12/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical