Lucene search

[email protected]CVE-2015-5143

HistoryJul 14, 2015 - 5:59 p.m.

CVE-2015-5143

2015-07-1417:59:06

CWE-399

[email protected]

web.nvd.nist.gov

109

cve-2015-5143

django

session management

denial of service

security vulnerability

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.3 Medium

AI Score

Confidence

Low

0.135 Low

EPSS

Percentile

95.7%

JSON

The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

Affected configurations

NVD

Node

djangoprojectdjangoMatch1.4.20

djangoprojectdjangoMatch1.5

djangoprojectdjangoMatch1.5alpha

djangoprojectdjangoMatch1.5beta

djangoprojectdjangoMatch1.5.1

djangoprojectdjangoMatch1.5.2

djangoprojectdjangoMatch1.5.3

djangoprojectdjangoMatch1.5.4

djangoprojectdjangoMatch1.5.5

djangoprojectdjangoMatch1.5.6

djangoprojectdjangoMatch1.5.7

djangoprojectdjangoMatch1.5.8

djangoprojectdjangoMatch1.5.9

djangoprojectdjangoMatch1.5.10

djangoprojectdjangoMatch1.5.11

djangoprojectdjangoMatch1.5.12

djangoprojectdjangoMatch1.6-

djangoprojectdjangoMatch1.6beta1

djangoprojectdjangoMatch1.6beta2

djangoprojectdjangoMatch1.6beta3

djangoprojectdjangoMatch1.6beta4

djangoprojectdjangoMatch1.6.1

djangoprojectdjangoMatch1.6.2

djangoprojectdjangoMatch1.6.3

djangoprojectdjangoMatch1.6.4

djangoprojectdjangoMatch1.6.5

djangoprojectdjangoMatch1.6.6

djangoprojectdjangoMatch1.6.7

djangoprojectdjangoMatch1.6.8

djangoprojectdjangoMatch1.6.9

djangoprojectdjangoMatch1.6.10

djangoprojectdjangoMatch1.7beta1

djangoprojectdjangoMatch1.7beta2

djangoprojectdjangoMatch1.7beta3

djangoprojectdjangoMatch1.7beta4

djangoprojectdjangoMatch1.7rc1

djangoprojectdjangoMatch1.7rc2

djangoprojectdjangoMatch1.7rc3

djangoprojectdjangoMatch1.7.1

djangoprojectdjangoMatch1.7.2

djangoprojectdjangoMatch1.7.3

djangoprojectdjangoMatch1.7.4

djangoprojectdjangoMatch1.7.5

djangoprojectdjangoMatch1.7.6

djangoprojectdjangoMatch1.7.7

djangoprojectdjangoMatch1.7.8

djangoprojectdjangoMatch1.7.9

djangoprojectdjangoMatch1.8.0

djangoprojectdjangoMatch1.8.1

djangoprojectdjangoMatch1.8.2

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

Node

oraclesolarisMatch11.3

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch15.04

canonicalubuntu_linuxMatch15.10

CPENameOperatorVersion
djangoproject:djangodjangoproject djangoeq1.4.20
djangoproject:djangodjangoproject djangoeq1.5
djangoproject:djangodjangoproject djangoeq1.5.1
djangoproject:djangodjangoproject djangoeq1.5.2
djangoproject:djangodjangoproject djangoeq1.5.3
djangoproject:djangodjangoproject djangoeq1.5.4
djangoproject:djangodjangoproject djangoeq1.5.5
djangoproject:djangodjangoproject djangoeq1.5.6
djangoproject:djangodjangoproject djangoeq1.5.7
djangoproject:djangodjangoproject djangoeq1.5.8

CPE	Name	Operator	Version
djangoproject:django	djangoproject django	eq	1.4.20
djangoproject:django	djangoproject django	eq	1.5
djangoproject:django	djangoproject django	eq	1.5.1
djangoproject:django	djangoproject django	eq	1.5.2
djangoproject:django	djangoproject django	eq	1.5.3
djangoproject:django	djangoproject django	eq	1.5.4
djangoproject:django	djangoproject django	eq	1.5.5
djangoproject:django	djangoproject django	eq	1.5.6
djangoproject:django	djangoproject django	eq	1.5.7
djangoproject:django	djangoproject django	eq	1.5.8