Lucene search
UbuntuUSN-2382-1HistoryOct 14, 2014 - 12:00 a.m.
Requests vulnerabilities
2014-10-1400:00:00
ubuntu.com
31
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
69.0%
Releases
- Ubuntu 14.04 ESM
Packages
- requests - elegant and simple HTTP library for Python
Details
Jakub Wilk discovered that Requests incorrectly reused authentication
credentials after being redirected. An attacker could possibly use this
issue to obtain authentication credentials intended for another site.
(CVE-2014-1829, CVE-2014-1830)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | python-requests | < 2.2.1-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 14.04 | noarch | python3-requests | < 2.2.1-1ubuntu0.1 | UNKNOWN |
Related
debian
debian
[SECURITY] [DSA 3146-1] requests security update
2015-01-30 15:54:18
[SECURITY] [DSA 3146-1] requests security update
2015-01-30 15:54:18
securityvulns
securityvulns
[USN-2382-1] Requests vulnerabilities
2014-10-15 00:00:00
Requests library security vulnerabilities
2014-10-15 00:00:00
osv
osv
requests - security update
2015-01-30 00:00:00
Exposure of Sensitive Information to an Unauthorized Actor in Requests
2022-05-14 02:09:22
PYSEC-2014-14
2014-10-15 14:55:00
nessus
nessus
Ubuntu 14.04 LTS : Requests vulnerabilities (USN-2382-1)
2014-10-15 00:00:00
Debian DSA-3146-1 : requests - security update
2015-02-02 00:00:00
Mandriva Linux Security Advisory : python-requests (MDVSA-2015:133)
2015-03-30 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3146-1)
2015-01-29 00:00:00
Mageia: Security Advisory (MGASA-2014-0409)
2022-01-28 00:00:00
Ubuntu: Security Advisory (USN-2382-1)
2014-10-15 00:00:00
mageia
mageia
Updated python-requests packages fix security vulnerabilities
2014-10-09 18:39:32
cve
cve
CVE-2014-1830
2014-10-15 14:55:05
CVE-2014-1829
2014-10-15 14:55:05
prion
prion
Design/Logic Flaw
2014-10-15 14:55:00
Authorization
2014-10-15 14:55:00
github
github
Exposure of Sensitive Information to an Unauthorized Actor in Requests
2022-05-14 02:09:22
Exposure of Sensitive Information to an Unauthorized Actor in Requests
2022-05-17 03:49:35
nvd
nvd
CVE-2014-1830
2014-10-15 14:55:05
CVE-2014-1829
2014-10-15 14:55:05
debiancve
debiancve
CVE-2014-1830
2014-10-15 14:55:05
CVE-2014-1829
2014-10-15 14:55:05
ubuntucve
ubuntucve
CVE-2014-1830
2014-09-19 00:00:00
CVE-2014-1829
2014-09-19 00:00:00
cvelist
cvelist
CVE-2014-1830
2014-10-15 14:00:00
CVE-2014-1829
2014-10-15 14:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.4
Confidence
Low
EPSS
0.003
Percentile
69.0%
Related for USN-2382-1