Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1qcmN2LTNjNWgtcmgzcc4AATFQ
SiCKRAGE Discloses Plaintext Credentials
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
Permalink: https://github.com/advisories/GHSA-jrcv-3c5h-rh3qJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcmN2LTNjNWgtcmgzcc4AATFQ
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 2 years ago
Updated: 7 months ago
CVSS Score: 9.8
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-jrcv-3c5h-rh3q, CVE-2018-9160
References:
- https://nvd.nist.gov/vuln/detail/CVE-2018-9160
- https://github.com/SickRage/SickRage/commit/8156a74a68aea930d1e1047baba8b115c3abfc44
- https://www.exploit-db.com/exploits/44545/
- https://github.com/advisories/GHSA-jrcv-3c5h-rh3q
Blast Radius: 4.7
Affected Packages
pypi:sickrage
Dependent packages: 0Dependent repositories: 3
Downloads: 517 last month
Affected Version Ranges: < 2018.03.09-1
Fixed in: 2018.03.09-1
All affected versions: 6.0.47, 6.0.48, 6.0.49, 6.0.50, 6.0.51, 6.0.52, 6.0.53, 6.0.54, 6.0.55, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.12, 7.0.16, 7.0.17, 7.0.18, 7.0.19, 7.0.20, 7.0.21, 7.0.22, 7.0.23, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.9, 8.0.11, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.7, 8.1.8, 8.1.9, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.3.0, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.3.7, 8.3.8, 8.3.9, 8.4.0, 8.4.1, 8.4.2, 8.4.3, 8.4.5, 8.4.6, 8.4.7, 8.5.0, 8.5.1, 8.5.3, 8.5.6, 8.6.3, 8.6.4, 8.6.5, 8.6.6, 8.6.7, 8.6.8, 8.6.9, 8.7.0, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.7.5, 8.7.6, 8.7.7, 8.7.8, 8.7.9, 8.8.0, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.8.6, 8.8.7, 8.8.8, 8.9.0, 8.9.1, 8.9.2, 8.9.3, 8.9.4, 8.9.5, 8.9.7, 8.9.8, 8.9.9, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.8, 9.0.9, 9.0.10, 9.0.11, 9.0.12, 9.0.13, 9.0.14, 9.0.15, 9.0.16, 9.0.17, 9.0.18, 9.0.19, 9.0.20, 9.0.21, 9.0.22, 9.0.23, 9.0.24, 9.0.25, 9.0.26, 9.0.27, 9.0.28, 9.0.29, 9.0.30, 9.0.31, 9.0.33, 9.0.34, 9.0.35, 9.0.37, 9.0.38, 9.0.39, 9.0.40, 9.0.41, 9.0.42, 9.0.43, 9.0.44, 9.0.61, 9.0.62, 9.0.63, 9.0.65, 9.0.66, 9.0.67, 9.0.68, 9.0.69, 9.0.70, 9.0.71, 9.0.72, 9.0.73, 9.0.74, 9.0.75, 9.0.78, 9.0.81, 9.0.82, 9.0.83, 9.0.84, 9.0.85, 9.0.87, 9.0.88, 9.0.89, 9.0.90, 9.1.1, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.1.8, 9.1.9, 9.1.10, 9.1.13, 9.1.14, 9.1.15, 9.1.16, 9.1.17, 9.1.18, 9.1.19, 9.1.20, 9.1.23, 9.1.24, 9.1.25, 9.1.26, 9.1.27, 9.1.28, 9.1.29, 9.1.30, 9.1.31, 9.1.32, 9.1.33, 9.1.34, 9.1.35, 9.1.36, 9.1.38, 9.1.39, 9.1.42, 9.1.43, 9.1.44, 9.1.45, 9.1.46, 9.1.47, 9.1.48, 9.1.49, 9.1.50, 9.1.51, 9.1.52, 9.1.53, 9.1.54, 9.1.55, 9.1.56, 9.1.57, 9.1.58, 9.1.59, 9.1.60, 9.1.62, 9.1.63, 9.1.64, 9.1.65, 9.1.66, 9.1.67, 9.1.68, 9.1.69, 9.1.70, 9.1.72, 9.1.74, 9.1.76, 9.1.77, 9.1.78, 9.2.2, 9.2.4, 9.2.5, 9.2.8, 9.2.9, 9.2.10, 9.2.11, 9.2.13, 9.2.14, 9.2.15, 9.2.16, 9.2.17, 9.2.18, 9.2.19, 9.2.20, 9.2.21, 9.2.22, 9.2.23, 9.2.24, 9.2.25, 9.2.26, 9.2.27, 9.2.29, 9.2.30, 9.2.31, 9.2.32, 9.2.34, 9.2.36, 9.2.38, 9.2.40, 9.2.42, 9.2.43, 9.2.44, 9.2.47, 9.2.48, 9.2.51, 9.2.52, 9.2.53, 9.2.54, 9.2.55, 9.2.56, 9.2.57, 9.2.61, 9.2.62, 9.2.63, 9.2.64, 9.2.65, 9.2.66, 9.2.67, 9.2.68, 9.2.69, 9.2.70, 9.2.71, 9.2.73, 9.2.76, 9.2.77, 9.2.78, 9.2.79, 9.2.80, 9.2.83, 9.2.84, 9.2.85, 9.2.86, 9.2.87, 9.2.89, 9.2.90, 9.2.91, 9.2.92, 9.2.93, 9.2.94, 9.2.95, 9.2.97, 9.2.98, 9.2.99, 9.2.100, 9.2.101, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 9.3.7, 9.3.8, 9.3.10, 9.3.11, 9.3.12, 9.3.13, 9.3.14, 9.3.15, 9.3.16, 9.3.17, 9.3.18, 9.3.19, 9.3.20, 9.3.21, 9.3.22, 9.3.23, 9.3.24, 9.3.25, 9.3.26, 9.3.27, 9.3.28, 9.3.29, 9.3.34, 9.3.35, 9.3.36, 9.3.37, 9.3.38, 9.3.39, 9.3.40, 9.3.41, 9.3.42, 9.3.43, 9.3.44, 9.3.45, 9.3.46, 9.3.47, 9.3.48, 9.3.49, 9.3.50, 9.3.51, 9.3.52, 9.3.53, 9.3.54, 9.3.55, 9.3.56, 9.3.57, 9.3.58, 9.3.59, 9.3.60, 9.3.61, 9.3.62, 9.3.63, 9.3.64, 9.3.65, 9.3.66, 9.3.67, 9.3.68, 9.3.69, 9.3.70, 9.3.71, 9.3.72, 9.3.73, 9.3.74, 9.3.75, 9.3.76, 9.3.77, 9.3.78, 9.3.79, 9.3.80, 9.3.81, 9.3.82, 9.3.83, 9.3.84, 9.3.85, 9.3.86, 9.3.87, 9.3.88, 9.3.89, 9.3.90, 9.3.91, 9.3.92, 9.3.93, 9.3.94, 9.3.95, 9.3.96, 9.3.97, 9.3.98, 9.3.99, 9.4.1, 9.4.2, 9.4.3, 9.4.4, 9.4.5, 9.4.6, 9.4.7, 9.4.8, 9.4.9, 9.4.10, 9.4.11, 9.4.12, 9.4.13, 9.4.14, 9.4.15, 9.4.16, 9.4.17, 9.4.18, 9.4.19, 9.4.20, 9.4.21, 9.4.22, 9.4.23, 9.4.24, 9.4.25, 9.4.26, 9.4.27, 9.4.28, 9.4.29, 9.4.30, 9.4.31, 9.4.32, 9.4.34, 9.4.35, 9.4.36, 9.4.38, 9.4.39, 9.4.40, 9.4.41, 9.4.43, 9.4.44, 9.4.45, 9.4.46, 9.4.47, 9.4.48, 9.4.49, 9.4.50, 9.4.51, 9.4.52, 9.4.53, 9.4.55, 9.4.56, 9.4.57, 9.4.58, 9.4.59, 9.4.61, 9.4.62, 9.4.63, 9.4.65, 9.4.66, 9.4.68, 9.4.69, 9.4.70, 9.4.71, 9.4.72, 9.4.73, 9.4.74, 9.4.75, 9.4.76, 9.4.77, 9.4.78, 9.4.79, 9.4.80, 9.4.81, 9.4.82, 9.4.83, 9.4.84, 9.4.96, 9.4.97, 9.4.98, 9.4.99, 9.4.100, 9.4.101, 9.4.102, 9.4.103, 9.4.104, 9.4.105, 9.4.106, 9.4.107, 9.4.108, 9.4.109, 9.4.110, 9.4.111, 9.4.113, 9.4.114, 9.4.115, 9.4.116, 9.4.117, 9.4.118, 9.4.119, 9.4.120, 9.4.123, 9.4.124, 9.4.130, 9.4.131, 9.4.132, 9.4.133, 9.4.134, 9.4.135, 9.4.136, 9.4.137, 9.4.138, 9.4.139, 9.4.141, 9.4.142, 9.4.143, 9.4.144, 9.4.145, 9.4.146, 9.4.147, 9.4.148, 9.4.149, 9.4.150, 9.4.151, 9.4.152, 9.4.153, 9.4.154, 9.4.155, 9.4.156, 9.4.157, 9.4.158, 9.4.159, 9.4.160, 9.4.161, 9.4.163, 9.4.164, 9.4.165, 9.4.166, 9.4.167, 9.4.168, 9.4.169, 9.4.170, 9.4.171, 9.4.172, 9.4.173, 9.4.174, 9.4.175, 9.4.176, 9.4.177, 9.4.178, 9.4.179, 9.4.181, 9.4.183, 9.4.186, 9.4.187, 9.4.188, 9.4.189, 9.4.190, 9.4.191, 9.4.192, 9.4.193, 9.4.194, 9.4.195, 9.4.196, 9.4.197, 9.4.198, 9.4.199, 9.4.200, 9.4.201, 9.4.202, 9.4.203, 9.4.204, 9.4.205, 9.4.206, 9.4.207, 9.4.208, 9.4.209, 9.4.210, 9.4.211, 9.4.212, 9.4.213, 9.4.214, 9.4.215, 9.4.216, 9.4.217, 9.4.218, 9.4.219, 9.4.220, 9.4.221, 9.4.222, 9.4.223, 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 10.0.9, 10.0.10, 10.0.11, 10.0.12, 10.0.13, 10.0.14, 10.0.15, 10.0.16, 10.0.17, 10.0.18, 10.0.19, 10.0.20, 10.0.21, 10.0.22, 10.0.23, 10.0.24, 10.0.25, 10.0.26, 10.0.27, 10.0.28, 10.0.29, 10.0.30, 10.0.31, 10.0.32, 10.0.33, 10.0.34, 10.0.35, 10.0.36, 10.0.37, 10.0.38, 10.0.39, 10.0.40, 10.0.41, 10.0.42, 10.0.43, 10.0.44, 10.0.45, 10.0.46, 10.0.47, 10.0.48, 10.0.49, 10.0.50, 10.0.51, 10.0.52, 10.0.53, 10.0.54, 10.0.55, 10.0.56, 10.0.57, 10.0.58, 10.0.59, 10.0.60, 10.0.61, 10.0.62, 10.0.63, 10.0.64, 10.0.65, 10.0.66, 10.0.68, 10.0.69, 10.0.70, 10.0.71
All unaffected versions: