CVE-2019-10160

🗓️ 07 Jun 2019 17:50:33Reported by redhatType

A security regression of CVE-2019-9636 discovered in Python 2.7 and versions 3.5-3.8.0b1 allows an attacker to exploit the user and password parts of a URL, leading to potential information leakage

Reporter	Title	Published	Views	Family All 467
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework v1 (CentOS6) is End of Life	14 Dec 202120:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in python affects OS Images for Red Hat Linux Systems shipped with Cloud Pak System (CVE-2019-10160)	24 Oct 201921:37	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Python affects IBM Operations Analytics Predictive Insights (CVE-2019-10160)	28 Feb 202016:57	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Python affects PowerKVM	17 May 201916:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	18 Oct 202214:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Python security vulnerability (CVE-2019-10160)	24 Oct 201916:45	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7	8 Apr 202018:27	–	ibm
IBM Security Bulletins	Security Bulletin: Resilient is vulnerable to using Python component with known vulnerabilities in RHEL 7	7 Apr 202020:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in python affects IBM Watson Studio Local	20 Dec 201914:50	–	ibm

[
  {
    "product": "python",
    "vendor": "Python",
    "versions": [
      {
        "status": "affected",
        "version": "affects 2.7, 3.5, 3.6, 3.7, >= v3.8.0a4 and < v3.8.0b1"
      }
    ]
  }
]

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00011.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/
lists	www.lists.debian.org/debian-lts-announce/2019/06/msg00022.html
access	www.access.redhat.com/errata/RHSA-2019:1587
lists	www.lists.apache.org/thread.html/r1b103833cb5bc8466e24ff0ecc5e75b45a705334ab6a444e64e840a0%40%3Cissues.bookkeeper.apache.org%3E
python-security	www.python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html
lists	www.lists.debian.org/debian-lts-announce/2020/08/msg00034.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/
usn	www.usn.ubuntu.com/4127-2/

22 Aug 2020 16:06Current

9.9High risk

Vulners AI Score9.9

CVSS 39.8

EPSS0.08811

CWE-172