Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-8213HistoryDec 07, 2015 - 8:59 p.m.
CVE-2015-8213
2015-12-0720:59:00
Debian Security Bug Tracker
security-tracker.debian.org
6
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.4%
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-django | < 1.8.7-1 | python-django_1.8.7-1_all.deb |
| Debian | 11 | all | python-django | < 1.8.7-1 | python-django_1.8.7-1_all.deb |
| Debian | 10 | all | python-django | < 1.8.7-1 | python-django_1.8.7-1_all.deb |
| Debian | 999 | all | python-django | < 1.8.7-1 | python-django_1.8.7-1_all.deb |
| Debian | 13 | all | python-django | < 1.8.7-1 | python-django_1.8.7-1_all.deb |
Related
openvas
openvas
Debian Security Advisory DSA 3404-1 (python-django - security update)
2015-11-25 00:00:00
Mageia Linux Local Check: mgasa-2015-0463
2015-12-08 00:00:00
Debian Security Advisory DSA 3404-1 (python-django - security update)
2015-11-25 00:00:00
nessus
nessus
Debian DLA-349-1 : python-django security update
2015-11-30 00:00:00
FreeBSD : django -- information leak vulnerability (11c52bc6-97aa-11e5-b8df-14dae9d210b8)
2015-12-01 00:00:00
openSUSE Security Update : python-django (openSUSE-2015-860)
2015-12-17 00:00:00
redhat
redhat
(RHSA-2016:0157) Moderate: python-django security update
2016-02-10 01:06:18
(RHSA-2016:0156) Moderate: python-django security update
2016-02-10 01:06:15
(RHSA-2016:0360) Moderate: python-django security update
2016-03-08 06:31:21
freebsd
freebsd
django -- information leak vulnerability
2015-11-24 00:00:00
altlinux
altlinux
gitlab
gitlab
Settings leak in date template filter
2015-12-07 00:00:00
osv
osv
Django settings leak in date template filter
2022-05-17 03:25:24
PYSEC-2015-11
2015-12-07 20:59:00
veracode
veracode
Information Disclosure Through Date Template Filter
2019-01-15 09:10:00
archlinux
archlinux
python-django, python2-django: information leakage
2015-12-05 00:00:00
debian
debian
[SECURITY] [DLA 349-1] python-django security update
2015-11-25 21:40:45
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
[SECURITY] [DSA 3404-1] python-django security update
2015-11-25 17:32:31
mageia
mageia
Updated python-django packages fix security vulnerability
2015-12-05 02:31:36
github
github
Django settings leak in date template filter
2022-05-17 03:25:24
fedora
fedora
[SECURITY] Fedora 23 Update: python-django-1.8.7-1.fc23
2015-12-07 20:32:33
[SECURITY] Fedora 22 Update: python-django-1.8.7-1.fc22
2015-12-31 01:53:36
prion
prion
Format string
2015-12-07 20:59:00
cve
cve
CVE-2015-8213
2015-12-07 20:59:00
ubuntucve
ubuntucve
CVE-2015-8213
2015-11-24 00:00:00
ubuntu
ubuntu
Django vulnerability
2015-11-24 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.007 Low
EPSS
Percentile
80.4%
Related for DEBIANCVE:CVE-2015-8213