Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py
Weakness
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mycli | Dbcli | 1.27.0 (including) | 1.27.0 (including) |
| Mycli | Ubuntu | lunar | * |
| Mycli | Ubuntu | mantic | * |
| Mycli | Ubuntu | oracular | * |
| Mycli | Ubuntu | plucky | * |
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/112.html
- https://cwe.mitre.org/data/definitions/192.html
- https://cwe.mitre.org/data/definitions/20.html