[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-1830Date: (C)2014-10-15   (M)2023-12-22


Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE
  
Reference:
DSA-3146
MDVSA-2015:133
http://advisories.mageia.org/MGASA-2014-0409.html
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108
https://github.com/kennethreitz/requests/issues/1885
openSUSE-SU-2016:0246

CPE    1
cpe:/o:opensuse:opensuse:13.1
CWE    1
CWE-200
OVAL    3
oval:org.secpod.oval:def:601941
oval:org.secpod.oval:def:52326
oval:org.secpod.oval:def:702260

© SecPod Technologies