| Package | Affected versions | Patched versions |
|---|---|---|
| rdiffweb | ≥ 2.4.1, < 2.4.2< 2.4.2 | 2.4.2 |
| rdiffweb | < 2.4.2 | 2.4.2 |
rdiffweb version 2.4.1 has no password policy or password checking, which could make users vulnerable to brute force password guessing attacks. Version 2.4.2 enforces minimum and maximum password lengths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free