Python Requests CVE-2014-1829 Information Disclosure Vulnerability
BID:70012
Info
Python Requests CVE-2014-1829 Information Disclosure Vulnerability
| Bugtraq ID: | 70012 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-1829 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 19 2014 12:00AM |
| Updated: | Feb 04 2015 12:03AM |
| Credit: | Jakub Wilk |
| Vulnerable: |
Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Python Requests CVE-2014-1829 Information Disclosure Vulnerability
Python Requests is prone to an information disclosure vulnerability.
An attacker may leverage this issue to gain access to potentially sensitive information. This may aid in further attacks.
Versions prior to Requests 2.3.0 are vulnerable.
Python Requests is prone to an information disclosure vulnerability.
An attacker may leverage this issue to gain access to potentially sensitive information. This may aid in further attacks.
Versions prior to Requests 2.3.0 are vulnerable.
Exploit / POC
Python Requests CVE-2014-1829 Information Disclosure Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
Python Requests CVE-2014-1829 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Python Requests CVE-2014-1829 Information Disclosure Vulnerability
References:
References: