Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
Permalink CVE-2014-2356
updated 5 months, 1 week ago by @pyrox0 Activity log
  • Created suggestion 5 months, 1 week ago
  • @pyrox0 ignored package steamguard-cli 5 months, 1 week ago
  • @pyrox0 dismissed 5 months, 1 week ago
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not …

Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.

Affected products

n/a
  • ==n/a
mGuard
  • ==8.1.0
  • ==8.1.1
  • =<8.0.2
  • ==8.0.3
  • ==7.6.4
Ignored packages (1)

pkgs.steamguard-cli

Linux utility for generating 2FA codes for Steam and managing Steam trade confirmations

Does not apply to nixpkgs