Lucene search
MitreCVELIST:CVE-2015-3982HistoryJun 02, 2015 - 2:00 p.m.
CVE-2015-3982
2015-06-0214:00:00
mitre
www.cve.org
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.
Related
ubuntucve
ubuntucve
CVE-2015-3982
2015-05-20 00:00:00
nessus
nessus
nvd
nvd
CVE-2015-3982
2015-06-02 14:59:10
prion
prion
Design/Logic Flaw
2015-06-02 14:59:00
github
github
Django allows user sessions hijacking via an empty string in the session key
2022-05-17 03:29:56
osv
osv
PYSEC-2015-19
2015-06-02 14:59:00
debiancve
debiancve
CVE-2015-3982
2015-06-02 14:59:10
freebsd
freebsd
django -- Fixed session flushing in the cached_db backend
2015-05-20 00:00:00
openvas
openvas
Fedora Update for python-django FEDORA-2015-8691
2015-07-07 00:00:00
Fedora Update for python-django FEDORA-2015-11403
2015-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.2-1.fc22
2015-05-30 15:38:05
[SECURITY] Fedora 22 Update: python-django-1.8.3-1.fc22
2015-07-23 08:54:39
cve
cve
CVE-2015-3982
2015-06-02 14:59:10