Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0482HistoryAug 26, 2014 - 2:55 p.m.
CVE-2014-0482
2014-08-2614:55:05
Debian Security Bug Tracker
security-tracker.debian.org
12
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.3%
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 11 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 999 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 13 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
Related
osv
osv
Django Middleware Enables Session Hijacking
2022-05-14 02:09:22
PYSEC-2014-6
2014-08-26 14:55:00
python-django - security update
2014-08-22 00:00:00
ubuntucve
ubuntucve
CVE-2014-0482
2014-08-26 00:00:00
cve
cve
CVE-2014-0482
2014-08-26 14:55:05
prion
prion
Design/Logic Flaw
2014-08-26 14:55:00
github
github
Django Middleware Enables Session Hijacking
2022-05-14 02:09:22
nvd
nvd
CVE-2014-0482
2014-08-26 14:55:05
cvelist
cvelist
CVE-2014-0482
2014-08-26 14:00:00
ibm
ibm
debian
debian
[SECURITY] [DSA 3010-1] python-django security update
2014-08-22 20:52:59
[SECURITY] [DSA 3010-1] python-django security update
2014-08-22 20:52:59
[SECURITY] [DLA 65-1] python-django security update
2014-09-29 08:20:58
nessus
nessus
Fedora 20 : python-django-1.6.6-1.fc20 (2014-9771)
2014-09-10 00:00:00
Ubuntu 14.04 LTS : Django vulnerabilities (USN-2347-1)
2014-09-17 00:00:00
Fedora 20 : python-django14-1.4.16-1.fc20 (2014-15266)
2014-12-02 00:00:00
openvas
openvas
Fedora Update for python-django15 FEDORA-2014-9866
2014-09-11 00:00:00
Debian: Security Advisory (DSA-3010-1)
2014-08-21 00:00:00
Gentoo Security Advisory GLSA 201412-22
2015-09-29 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2014-08-20 00:00:00
gentoo
gentoo
Django: Multiple vulnerabilities
2014-12-13 00:00:00
mageia
mageia
Updated python-django packages fix multiple vulnerabilities
2014-09-05 13:07:37
fedora
fedora
[SECURITY] Fedora 20 Update: python-django15-1.5.9-1.fc20
2014-09-10 13:29:30
[SECURITY] Fedora 20 Update: python-django14-1.4.16-1.fc20
2014-12-01 18:59:44
[SECURITY] Fedora 20 Update: python-django14-1.4.14-1.fc20
2014-09-09 22:27:18
ubuntu
ubuntu
Django vulnerabilities
2014-09-16 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3010-1] python-django security update
2014-08-26 00:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
73.3%
Related for DEBIANCVE:CVE-2014-0482