CVE-2013-1895

2020-01-2814:30:24

redhat

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.016

Percentile

87.6%

JSON

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

CNA Affected

[
  {
    "product": "py-bcrypt",
    "vendor": "py-bcrypt",
    "versions": [
      {
        "status": "affected",
        "version": "before 0.3"
      }
    ]
  }
]