Описание
web2py is vulnerable to password brute-force attack
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.
Пакеты
Наименование
web2py
pip
Затронутые версииВерсия исправления
< 2.14.6
2.14.6
Связанные уязвимости
CVSS3: 9.8
ubuntu
почти 9 лет назад
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.
CVSS3: 9.8
nvd
почти 9 лет назад
web2py before 2.14.6 does not properly check if a host is denied before verifying passwords, allowing a remote attacker to perform brute-force attacks.
CVSS3: 9.8
debian
почти 9 лет назад
web2py before 2.14.6 does not properly check if a host is denied befor ...