← Back

CVE-2022-4018

nvd nist
Published: Nov 16, 2022Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

Affected (6)

Products: Ikus Soft: Rdiffweb
Ikus Soft
1 product
Rdiffweb
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Ikus Soft
Rdiffweb
Up to 2.4.10
Rdiffweb
Version 2.5.0 alpha1
Rdiffweb
Version 2.5.0 alpha2
Rdiffweb
Version 2.5.0 alpha3
Rdiffweb
Version 2.5.0 alpha4
Rdiffweb
Version 2.5.0 alpha5

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (4)

Source: security@huntr.dev
PatchThird Party Advisory
Source: security@huntr.dev
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.