Weak Password Requirements

CVE-2022-3376

Medium

5.3/10

Summary

Weak Password Requirements in rdiffweb prior to 2.5.0a4.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: LOW
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

CWE-521 - Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References

Advisory Timeline

Published Oct 06, 2022