python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
BID:62386
Info
python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
| Bugtraq ID: | 62386 |
| Class: | Design Error |
| CVE: |
CVE-2013-4346 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2013 12:00AM |
| Updated: | Nov 03 2015 07:25PM |
| Credit: | Seth Arnold |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
python-oauth2 is prone to a security-bypass vulnerability.
Successful exploits may allow attackers to alter URLs and perform malicious actions through replay attacks; other attacks may also be possible.
python-oauth2 is prone to a security-bypass vulnerability.
Successful exploits may allow attackers to alter URLs and perform malicious actions through replay attacks; other attacks may also be possible.
Exploit / POC
python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
An attacker can carry out this attack using readily available network utilities.
An attacker can carry out this attack using readily available network utilities.
Solution / Fix
python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
python-oauth2 Signed URL Nonce Verification Security Bypass Vulnerability
References:
References: