SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2014-1829

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

DSA-3146

MDVSA-2015:133

USN-2382-1

http://advisories.mageia.org/MGASA-2014-0409.html

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108

https://github.com/kennethreitz/requests/issues/1885


30430



423868



247974



909



194654



282