CVE-2023-44690: Weak Encryption

Q: What is the vulnerability ID for the inadequate encryption strength in mycli 1.27.0 vulnerability?

The vulnerability ID for this issue is CVE-2023-44690.

Q: What is the affected software version for this vulnerability?

The affected software version is mycli 1.27.0.

Q: How can attackers exploit this vulnerability?

Attackers can exploit this vulnerability by accessing sensitive information via the /mycli/config.py file.

Q: Where can I find more information about this vulnerability?

You can find more information about this vulnerability on the following references: 1. [GitHub](https://github.com/dbcli/mycli/issues/1131) 2. [NIST NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-44690) 3. [GitHub Advisory](https://github.com/advisories/GHSA-v9vj-9pxv-mr2w)

Q: What is the CWE ID for this vulnerability?

The CWE ID for this vulnerability is CWE-326.

Published Oct 19, 2023

Updated

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py

Other sources

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py.

Affected Software

2 affected components

pip/mycli<=1.27.0

Dbcli Mycli=1.27.0

Event History

Oct 19, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

10:15 PM

Description

Oct 20, 2023

Advisory Published

12:30 AM

Frequently Asked Questions

What is the vulnerability ID for the inadequate encryption strength in mycli 1.27.0 vulnerability?

The vulnerability ID for this issue is CVE-2023-44690.

What is the affected software version for this vulnerability?