CVE-2022-3376: 
Python vulnerability analysis and mitigation

A weak password requirements vulnerability was identified in GitHub repository ikus060/rdiffweb prior to version 2.5.0a4. The vulnerability, tracked as CVE-2022-3376, allowed users to set their new password to be the same as their current password, which is considered a security weakness (Debian Tracker).

The vulnerability is classified as CWE-521 (Weak Password Requirements) as confirmed by the NVD CNA Status report (NVD CNA Report). The issue specifically allowed users to set their new password identical to their current password during password change operations, which violates security best practices for password management.

The vulnerability could potentially weaken the security posture of affected systems by allowing users to bypass password change requirements, effectively maintaining the same password indefinitely without actual changes to their credentials.

The vulnerability was present in the password change functionality of rdiffweb installations prior to version 2.5.0a4. It could be exploited through the normal password change interface by setting the new password identical to the current password.

The issue was fixed in rdiffweb version 2.5.0a4 by implementing additional password policy checks that prevent users from setting their new password to be the same as their current password. The fix includes validation that raises an error message stating 'The new password must be different from the current password' when such an attempt is made (GitHub Commit).