ALT-PU-2024-12932

Низкий

ALT-PU-2024-12932: package urbackup-server update to version 2.5.33-alt1

Источник

errata.altlinux.org

Дата публикации

18.09.2024

Дата обновления

18.09.2024

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades urbackup-server to version 2.5.33-alt1.

Средний 5.3

Дата публикации: 07.11.2023

CWE-203

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

CVSS 3.1

Средний 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Ссылки

CVE-2023-47102

CVSS3: 5.3

nvd

около 3 лет назад

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

GHSA-q8x9-r7fc-qfjv

CVSS3: 5.3

github

почти 3 года назад

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.