← Back

CVE-2022-3327

nvd nist
Published: Oct 20, 2022Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

Affected (7)

Products: Ikus Soft: Rdiffweb
Ikus Soft
1 product
Rdiffweb
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Ikus Soft
Rdiffweb
Before 2.4.10
Rdiffweb
Version 2.4.10
Rdiffweb
Version 2.5.0 alpha1
Rdiffweb
Version 2.5.0 alpha2
Rdiffweb
Version 2.5.0 alpha3
Rdiffweb
Version 2.5.0 alpha4
Rdiffweb
Version 2.5.0 alpha5

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (5)

Source: security@huntr.dev
PatchThird Party Advisory
Source: security@huntr.dev
Permissions RequiredThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.