CPE Details
chetcpasswd Project chetcpasswd 2.3.3
2.3.3
2019-11-13
17h38 +00:00
17h38 +00:00
2019-11-13
17h38 +00:00
17h38 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:chetcpasswd_project:chetcpasswd:2.3.3:*:*:*:*:*:*:*
Informations
Vendor
chetcpasswd_projectProduct
chetcpasswdVersion
2.3.3Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header. | 7.5 |
Haute |
||
| Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system. | 5 |
