Lucene search
MitreCVELIST:CVE-2007-0405HistoryJan 23, 2007 - 12:00 a.m.
CVE-2007-0405
2007-01-2300:00:00
mitre
www.cve.org
0.004 Low
EPSS
Percentile
72.6%
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.
Related
ubuntucve
ubuntucve
CVE-2007-0405
2007-01-23 00:00:00
cve
cve
CVE-2007-0405
2007-01-23 00:28:00
nvd
nvd
CVE-2007-0405
2007-01-23 00:28:00
prion
prion
Authentication flaw
2007-01-23 00:28:00
github
github
Django Improper Access Control
2022-05-01 17:44:04
debiancve
debiancve
CVE-2007-0405
2007-01-23 00:28:00
securityvulns
securityvulns