Lucene search
RedhatCVE-2013-4346HistoryMay 20, 2014 - 2:55 p.m.
CVE-2013-4346
2014-05-2014:55:04
CWE-310
redhat
web.nvd.nist.gov
44
server
verify_request
simplegeo
python-oauth2
nonce
replay attacks
signed url
cve-2013-4346
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
65.9%
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.
Affected configurations
Node
urbanairshippython-oauth2Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| urbanairship | python-oauth2 | - | cpe:2.3:a:urbanairship:python-oauth2:-:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2014-05-20 14:55:00
github
github
SimpleGeo python-oauth2 does not check the nonce allowing replay attacks
2022-05-17 03:46:28
cvelist
cvelist
CVE-2013-4346
2014-05-20 14:00:00
veracode
veracode
Nonce Values Unchecked
2019-01-15 09:07:14
Cross-Site Scripting (XSS)
2019-05-02 05:42:13
Privilege Escalation
2019-05-02 05:42:26
nvd
nvd
CVE-2013-4346
2014-05-20 14:55:04
osv
osv
PYSEC-2014-85
2014-05-20 14:55:00
SimpleGeo python-oauth2 does not check the nonce allowing replay attacks
2022-05-17 03:46:28
ubuntucve
ubuntucve
CVE-2013-4346
2014-05-20 00:00:00
openvas
openvas
Fedora Update for python-oauth2 FEDORA-2014-10784
2014-10-01 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-10786
2014-10-01 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-12475
2014-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-oauth2-1.5.211-8.fc21
2014-11-01 16:22:17
[SECURITY] Fedora 19 Update: python-oauth2-1.5.211-8.fc19
2014-10-28 06:43:39
[SECURITY] Fedora 19 Update: python-oauth2-1.5.211-7.fc19
2014-09-26 09:04:38
nessus
nessus
Fedora 21 : python-oauth2-1.5.211-7.fc21 (2014-10809)
2014-09-29 00:00:00
Fedora 19 : python-oauth2-1.5.211-7.fc19 (2014-10784)
2014-09-29 00:00:00
Fedora 19 : python-oauth2-1.5.211-8.fc19 (2014-12536)
2014-10-29 00:00:00
amazon
amazon
Medium: python-oauth2
2014-10-14 10:04:00
redhat
redhat
(RHSA-2015:1592) Important: Red Hat Satellite 6.1.1 on RHEL 6
2015-08-12 04:47:35
(RHSA-2015:1591) Important: Red Hat Satellite 6.1.1 on RHEL 7
2015-08-12 04:38:51
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
65.9%
Related for CVE-2013-4346