CVE-2022-3273
06.10.2022, 18:16
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ikus-soft | rdiffweb | 𝑥 ≤ 2.4.10 |
| ikus-soft | rdiffweb | 2.5.0:alpha1 |
| ikus-soft | rdiffweb | 2.5.0:alpha2 |
| ikus-soft | rdiffweb | 2.5.0:alpha3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
- CWE-326 - Inadequate Encryption StrengthThe software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
References