Lucene search
HistoryMay 20, 2014 - 2:55 p.m.
CVE-2013-4347
cve
2013
4347
weak random numbers
nonces
remote attackers
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.0%
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.
Affected configurations
Node
urbanairshippython-oauth2Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| urbanairship:python-oauth2 | urbanairship python-oauth2 | eq | - |
Related
ubuntucve
ubuntucve
CVE-2013-4347
2014-05-20 00:00:00
nvd
nvd
CVE-2013-4347
2014-05-20 14:55:04
osv
osv
PYSEC-2014-86
2014-05-20 14:55:00
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0314)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-425)
2015-09-08 00:00:00
Fedora Update for python-oauth2 FEDORA-2014-12536
2014-10-29 00:00:00
cvelist
cvelist
CVE-2013-4347
2014-05-20 14:00:00
mageia
mageia
Updated python-oauth2 packages fix CVE-2013-4347
2013-10-26 00:53:17
prion
prion
Code injection
2014-05-20 14:55:00
github
github
nessus
nessus
Fedora 21 : python-oauth2-1.5.211-8.fc21 (2014-12483)
2014-11-03 00:00:00
Amazon Linux AMI : python-oauth2 (ALAS-2014-425)
2014-10-15 00:00:00
Fedora 20 : python-oauth2-1.5.211-7.fc20 (2014-10786)
2014-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-oauth2-1.5.211-7.fc20
2014-09-26 09:06:33
[SECURITY] Fedora 21 Update: python-oauth2-1.5.211-7.fc21
2014-09-27 09:51:21
[SECURITY] Fedora 20 Update: python-oauth2-1.5.211-8.fc20
2014-10-28 06:45:57
amazon
amazon
Medium: python-oauth2
2014-10-14 10:04:00
redhat
redhat
(RHSA-2015:1592) Important: Red Hat Satellite 6.1.1 on RHEL 6
2015-08-12 04:47:35
(RHSA-2015:1591) Important: Red Hat Satellite 6.1.1 on RHEL 7
2015-08-12 04:38:51
veracode
veracode
Incorrect Session Invalidation
2019-05-02 05:42:22
Man-In-The-Middle (MitM)
2019-05-02 05:42:16
Cross-Site Scripting (XSS)
2019-05-02 05:42:13
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.0%
Related for CVE-2013-4347