Lucene search

K
freebsdFreeBSD05DC6EFA-2370-11E3-95B7-00E0814CAB4E
HistorySep 15, 2013 - 12:00 a.m.

django -- denial-of-service via large passwords

2013-09-1500:00:00
vuxml.freebsd.org
14

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%

The Django project reports:

These releases address a denial-of-service attack against Django’s
authentication framework. All users of Django are encouraged to
upgrade immediately.

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.013 Low

EPSS

Percentile

85.7%