CVE-2023-2160: Weak Password Requirements in modoboa/modoboa
Published Apr 18, 2023
·Updated
Modoboa 2.0.5 and prior allows users to set unsafe passwords, such as 1 or HACK. This issue is fixed in commit 130257c96a2392ada795785a91178e656e27015c and is part of version 2.1.0.
Other sources
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
— MITRE
Affected Software
2 affected componentsFixes available
pip/modoboa<=2.0.5
2.1.0
Modoboa Modoboa<2.1.0
Remediation
Event History
Apr 18, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Advisory Published
06:30 PM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-2160.
2
What is the title of the vulnerability?
The vulnerability is titled Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.
3
What is the severity of CVE-2023-2160?
The severity of CVE-2023-2160 is critical with a severity value of 9.8.
4
What software is affected by CVE-2023-2160?
The software affected is Modoboa Modoboa prior to version 2.1.0.
5
How can I fix the Weak Password Requirements vulnerability in Modoboa Modoboa?
To fix the Weak Password Requirements vulnerability in Modoboa Modoboa, update to version 2.1.0 or newer.