DEBIAN-CVE-2023-44690

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2023-44690

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2023-44690

Upstream

CVE-2023-44690

Published

2023-10-19T22:15:09.830Z

Modified

2026-03-17T02:48:59.997578Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py

References

https://security-tracker.debian.org/tracker/CVE-2023-44690

Affected packages

Debian:11 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.23.2-0.1

1.23.2-1

1.23.2-2

1.24.1-1

1.24.1-2

1.24.1-3

1.24.2-1

1.24.3-1

1.24.4-1

1.25.0-1

1.26.1-1

1.26.1-2

1.26.1-3

1.27.0-1

1.27.2-1

1.27.2-2

1.28.0-1

1.28.0-2

1.29.2-1

1.29.2-2

1.29.2-3

1.29.2-4

1.29.2-5

1.29.2-6

1.29.2-7

1.30.0-1

1.31.1-1

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"

Debian:12 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.26.1-3

1.27.0-1

1.27.2-1

1.27.2-2

1.28.0-1

1.28.0-2

1.29.2-1

1.29.2-2

1.29.2-3

1.29.2-4

1.29.2-5

1.29.2-6

1.29.2-7

1.30.0-1

1.31.1-1

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"

Debian:13 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"

Debian:14 / mycli

Package

Name: mycli
Purl: pkg:deb/debian/mycli?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31.2-1

1.32.0-1

1.34.2-1

1.34.4-1

1.36.0-1

1.37.1-1

1.37.1-2

1.38.0-1

1.38.3-1

1.38.3-2

1.38.4-1

1.39.0-1

1.39.1-1

1.40.0-1

1.40.0-2

1.41.0-1

1.41.1-1

1.41.2-1

1.42.0-1

1.43.0-1

1.43.1-1

1.44.1-1

1.44.2-1

1.46.0-1

1.48.0-1

1.49.0-1

1.50.0-1

1.51.1-1

1.53.0-1

1.54.1-1

1.55.0-1

1.57.0-1

1.59.0-1

1.62.0-1

1.64.0-1

Ecosystem specific

{
    "urgency": "unimportant"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-44690.json"