← All advisories

Moderate severityNVD Advisory· Published Oct 19, 2023· Updated Sep 13, 2024

CVE-2023-44690

CVE-2023-44690

Description

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mycliPyPI	<= 1.27.0	—

Affected products

4

mycli/myclidescription
osv-coords3 versions
pkg:apk/chainguard/mycli pkg:apk/wolfi/mycli pkg:pypi/mycli
< 0+ 2 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: <= 1.27.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-v9vj-9pxv-mr2wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-44690ghsaADVISORY
github.com/dbcli/mycli/issues/1131ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/mycli/PYSEC-2023-213.yamlghsaWEB

News mentions

0

No linked articles in our index yet.