DEBIAN-CVE-2023-44690

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-44690

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-44690

Upstream

CVE-2023-44690

Published

2023-10-19T22:15:09Z

Modified

2026-09-15T09:01:39Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py

References

https://security-tracker.debian.org/tracker/CVE-2023-44690

Affected packages

Debian:12 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source&distro=bookworm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.26.1-3

1.27.0-1

1.27.2-1

1.27.2-2

1.28.0-1

1.28.0-2

1.29.2-1

1.29.2-2

1.29.2-3

1.29.2-4

1.29.2-5

1.29.2-6

1.29.2-7

1.30.0-1

1.31.1-1

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

1.66.0-1

1.67.1-1

1.68.0-1

1.68.0-2

1.68.1-1

1.69.0-1

1.70.0-1

1.71.0-1

1.72.1-1

1.73.1-1

1.74.0-1

1.76.0-1

1.76.0-2

2.*

2.0.0-1

2.2.0-1

2.3.0-1

2.4.0-1

2.7.0-1

2.8.0-1

2.9.0-1

2.12.0-1

2.13.2-1

2.14.0-1

2.16.0-1

2.18.4-1

2.19.0-1

2.21.1-1

2.23.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"

Debian:13 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source&distro=trixie

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

1.66.0-1

1.67.1-1

1.68.0-1

1.68.0-2

1.68.1-1

1.69.0-1

1.70.0-1

1.71.0-1

1.72.1-1

1.73.1-1

1.74.0-1

1.76.0-1

1.76.0-2

2.*

2.0.0-1

2.2.0-1

2.3.0-1

2.4.0-1

2.7.0-1

2.8.0-1

2.9.0-1

2.12.0-1

2.13.2-1

2.14.0-1

2.16.0-1

2.18.4-1

2.19.0-1

2.21.1-1

2.23.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"

Debian:14 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source&distro=forky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

1.66.0-1

1.67.1-1

1.68.0-1

1.68.0-2

1.68.1-1

1.69.0-1

1.70.0-1

1.71.0-1

1.72.1-1

1.73.1-1

1.74.0-1

1.76.0-1

1.76.0-2

2.*

2.0.0-1

2.2.0-1

2.3.0-1

2.4.0-1

2.7.0-1

2.8.0-1

2.9.0-1

2.12.0-1

2.13.2-1

2.14.0-1

2.16.0-1

2.18.4-1

2.19.0-1

2.21.1-1

2.23.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"