GHSA-jrcv-3c5h-rh3q
Dashboard / Vulnerabilities / GHSA-jrcv-3c5h-rh3q
GHSA-jrcv-3c5h-rh3q
Published: 13 May 2022Last Modified: 22 Feb 2026
Aliases:
Summary: SiCKRAGE Discloses Plaintext Credentials
Details: SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
References: https://nvd.nist.gov/vuln/detail/CVE-2018-9160, https://github.com/SickRage/SickRage/commit/8156a74a68aea930d1e1047baba8b115c3abfc44, https://github.com/SickRage/SickRage, https://github.com/pypa/advisory-database/tree/main/vulns/sickrage/PYSEC-2018-101.yaml, https://www.exploit-db.com/exploits/44545
Affected packages
Package
Name: sickrage
Purl: pkg:pypi/sickrage
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -2018.03.09-1
Affected versions
10.0.0
10.0.0.dev10
10.0.0.dev11
10.0.0.dev12
10.0.0.dev13
10.0.0.dev14
10.0.0.dev15
10.0.0.dev16
10.0.0.dev17
10.0.0.dev18
10.0.0.dev19
10.0.0.dev20
10.0.0.dev21
10.0.0.dev22
10.0.0.dev23
10.0.0.dev24
10.0.0.dev25
10.0.0.dev26
10.0.0.dev27
10.0.0.dev28
10.0.0.dev29
10.0.0.dev3
10.0.0.dev30
10.0.0.dev31
10.0.0.dev33
10.0.0.dev34
10.0.0.dev35
10.0.0.dev4
10.0.0.dev5
10.0.0.dev6
10.0.0.dev7
10.0.0.dev8
10.0.0.dev9
10.0.1
10.0.1.dev1
10.0.10
10.0.10.dev1
10.0.10.dev2
10.0.11
10.0.11.dev1
10.0.11.dev2
10.0.12
10.0.12.dev1
10.0.12.dev2
10.0.12.dev3
10.0.12.dev4
10.0.12.dev5
10.0.12.dev6
10.0.12.dev7
10.0.12.dev8
10.0.13
10.0.13.dev2
10.0.14
10.0.14.dev1
10.0.15
10.0.15.dev1
10.0.16
10.0.16.dev1
10.0.17
10.0.17.dev1
10.0.18
10.0.18.dev1
10.0.19
10.0.19.dev1
10.0.2
10.0.2.dev1
10.0.20
10.0.20.dev1
10.0.21
10.0.21.dev1
10.0.21.dev2
10.0.22
10.0.22.dev1
10.0.23
10.0.23.dev1
10.0.24
10.0.24.dev1
10.0.25
10.0.25.dev1
10.0.25.dev2
10.0.25.dev3
10.0.26
10.0.26.dev1
10.0.27
10.0.27.dev2
10.0.28
10.0.28.dev1
10.0.29
10.0.29.dev1
10.0.3
10.0.3.dev1
10.0.30
10.0.30.dev1
10.0.31
10.0.31.dev1
10.0.32
10.0.32.dev1
10.0.33
10.0.33.dev1
10.0.33.dev2
10.0.33.dev3
10.0.34
10.0.34.dev1
10.0.35
10.0.35.dev1
10.0.36
10.0.36.dev1
10.0.37
10.0.37.dev1
10.0.38
10.0.38.dev1
10.0.39
10.0.39.dev1
10.0.4
10.0.4.dev1
10.0.4.dev2
10.0.4.dev3
10.0.4.dev4
10.0.40
10.0.40.dev1
10.0.41
10.0.41.dev1
10.0.42
10.0.42.dev1
10.0.43
10.0.43.dev1
10.0.44
10.0.44.dev1
10.0.45
10.0.45.dev1
10.0.46
10.0.46.dev1
10.0.47
10.0.47.dev1
10.0.48
10.0.48.dev1
10.0.49
10.0.49.dev1
10.0.49.dev2
10.0.5
10.0.5.dev1
10.0.50
10.0.50.dev1
10.0.51
10.0.51.dev1
10.0.52
10.0.52.dev1
10.0.53
10.0.53.dev1
10.0.53.dev2
10.0.54
10.0.54.dev1
10.0.55
10.0.55.dev1
10.0.56
10.0.56.dev1
10.0.57
10.0.57.dev1
10.0.57.dev2
10.0.58
10.0.58.dev1
10.0.59
10.0.59.dev1
10.0.6
10.0.6.dev1
10.0.60
10.0.60.dev1
10.0.60.dev2
10.0.60.dev3
10.0.61
10.0.61.dev1
10.0.61.dev2
10.0.62
10.0.62.dev1
10.0.62.dev2
10.0.63
10.0.63.dev1
10.0.64
10.0.64.dev1
10.0.64.dev2
10.0.65
10.0.65.dev1
10.0.66
10.0.66.dev1
10.0.67.dev1
10.0.67.dev2
10.0.67.dev3
10.0.68
10.0.68.dev1
10.0.69
10.0.69.dev1
10.0.7
10.0.7.dev1
10.0.7.dev2
10.0.70
10.0.70.dev1
10.0.70.dev2
10.0.70.dev3
10.0.71
10.0.71.dev2
10.0.8
10.0.8.dev1
10.0.8.dev2
10.0.8.dev3
10.0.9
10.0.9.dev2
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
