En bref
- CVE-2013-1895 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant py-bcrypt, py-bcrypt (python).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.8%, plus élevée que 86.6% des vulnérabilités.
- Correctif : mettre à jour vers 0.3 ou plus récent.
Description
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
NVD description
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free