Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-0482HistoryAug 26, 2014 - 2:55 p.m.
CVE-2014-0482
2014-08-2614:55:00
Debian Security Bug Tracker
security-tracker.debian.org
9
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.9%
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.RemoteUserBackend backend, allows remote authenticated users to hijack web sessions via vectors related to the REMOTE_USER header.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 11 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 10 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 999 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
| Debian | 13 | all | python-django | < 1.6.6-1 | python-django_1.6.6-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2014-0482
2014-08-26 00:00:00
osv
osv
Django Middleware Enables Session Hijacking
2022-05-14 02:09:22
PYSEC-2014-6
2014-08-26 14:55:00
python-django - security update
2014-09-29 00:00:00
prion
prion
Design/Logic Flaw
2014-08-26 14:55:00
github
github
Django Middleware Enables Session Hijacking
2022-05-14 02:09:22
cve
cve
CVE-2014-0482
2014-08-26 14:55:00
nessus
nessus
Mandriva Linux Security Advisory : python-django (MDVSA-2014:179)
2014-09-12 00:00:00
Fedora 20 : python-django14-1.4.16-1.fc20 (2014-15266)
2014-12-02 00:00:00
GLSA-201412-22 : Django: Multiple vulnerabilities
2014-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: python-django15-1.5.9-1.fc20
2014-09-10 13:29:30
[SECURITY] Fedora 20 Update: python-django14-1.4.14-1.fc20
2014-09-09 22:27:18
[SECURITY] Fedora 20 Update: python-django14-1.4.16-1.fc20
2014-12-01 18:59:44
mageia
mageia
Updated python-django packages fix multiple vulnerabilities
2014-09-05 13:07:37
gentoo
gentoo
Django: Multiple vulnerabilities
2014-12-13 00:00:00
freebsd
freebsd
django -- multiple vulnerabilities
2014-08-20 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2014-09-16 00:00:00
openvas
openvas
Debian Security Advisory DSA 3010-1 (python-django - security update)
2014-08-22 00:00:00
Debian: Security Advisory (DLA-65-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2014-0366)
2022-01-28 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3010-1] python-django security update
2014-08-26 00:00:00
debian
debian
[SECURITY] [DLA 65-1] python-django security update
2014-09-29 08:20:58
[SECURITY] [DSA 3010-1] python-django security update
2014-08-22 20:52:59
[SECURITY] [DSA 3010-1] python-django security update
2014-08-22 20:52:59
6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
72.9%
Related for DEBIANCVE:CVE-2014-0482