GitHub Advisoryadvisory · PyPI

GHSA-v9vj-9pxv-mr2w mycli has Inadequate Encryption Strength

MEDIUM Published 2023-10-20 Modified 2024-09-26 Official page ↗

Aliases: CVE-2023-44690
Ecosystem: PyPI
Packages: mycli
Severity: Moderate
Weaknesses: CWE-326
Reviewed: 2023-10-20

Affected packages

• PyPI mycli: <= 1.27.0 (no fix yet)

Description

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via `/mycli/config.py`.

Related

Alias · CVE (1)

CVE-2023-44690 Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py vulnerability

Weakness · CWE (1)

CWE-326 Inadequate Encryption Strength weakness

References