Lucene search
MitreCVELIST:CVE-2014-9720HistoryJan 24, 2020 - 5:03 p.m.
CVE-2014-9720
2020-01-2417:03:38
mitre
www.cve.org
Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.
Related
nessus
nessus
Debian DLA-475-1 : python-tornado security update
2016-05-16 00:00:00
SUSE SLED12 Security Update : python-tornado (SUSE-SU-2016:1195-1)
2016-05-04 00:00:00
Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)
2015-06-10 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-tornado-3.2.2-1.fc21
2015-06-10 19:18:24
[SECURITY] Fedora 22 Update: python-tornado-3.2.2-1.fc22
2015-06-09 15:04:28
nvd
nvd
CVE-2014-9720
2020-01-24 18:15:12
osv
osv
python-tornado - security update
2015-07-22 00:00:00
Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)
2022-05-17 19:57:19
PYSEC-2020-213
2020-01-24 18:15:00
debian
debian
[SECURITY] [DLA 279-1] python-tornado security update
2015-07-22 12:52:54
[SECURITY] [DLA 475-1] python-tornado security update
2016-05-15 19:45:40
github
github
Tornado XSRF cookie allows side-channel attack against TLS (BREACH attack)
2022-05-17 19:57:19
openvas
openvas
Mageia: Security Advisory (MGASA-2015-0251)
2022-01-28 00:00:00
Fedora Update for python-tornado FEDORA-2015-9143
2015-07-07 00:00:00
Fedora Update for python-tornado FEDORA-2015-8606
2015-06-11 00:00:00
cve
cve
CVE-2014-9720
2020-01-24 18:15:12
mageia
mageia
Updated python-tornado package fixes security vulnerability
2015-07-01 15:40:22
prion
prion
Cross site request forgery (csrf)
2020-01-24 18:15:00
ubuntucve
ubuntucve
CVE-2014-9720
2020-01-24 00:00:00
debiancve
debiancve
CVE-2014-9720
2020-01-24 18:15:12