Lucene search
Veracode Vulnerability DatabaseVERACODE:25871HistoryJul 13, 2020 - 5:28 a.m.
Information Disclosure
2020-07-1305:28:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.001
Percentile
41.4%
django-two-factor-auth is vulnerable to information disclosure. The vulnerability exists as it stores the user’s password in the user session with base64-encoded clear text.
Related
osv
osv
PYSEC-2020-39
2020-07-10 21:15:00
CVE-2020-15105
2020-07-10 21:15:10
User passwords are stored in clear text in the Django session
2020-07-10 20:55:00
prion
prion
Authentication flaw
2020-07-10 21:15:00
nvd
nvd
CVE-2020-15105
2020-07-10 21:15:10
cve
cve
CVE-2020-15105
2020-07-10 21:15:10
cvelist
cvelist
github
github
User passwords are stored in clear text in the Django session
2020-07-10 20:55:00