Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2024-0210
HistoryJun 03, 2024 - 9:30 p.m.

Updated python-requests packages fix security vulnerability

2024-06-0321:30:48
Gentoo Foundation
advisories.mageia.org
18
python
requests
package
security
vulnerability
cve-2024-35195
cert verification
unix

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%

JSON

CVE-2024-35195: Fixed cert verification regardless of changes to the value of verify (bsc#1224788)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchpython-requests< 2.32.3-1python-requests-2.32.3-1.mga9

Related

vulnrichment 1
cbl_mariner 1
osv 30
nessus 12
openvas 10
ibm 12
nvd 1
fedora 2
github 1
cvelist 1
alpinelinux 1
redos 1
veracode 1
f5 1
redhatcve 1
cve 1
debiancve 1
ubuntucve 1
wolfi 1
redhat 2
vulnrichment
vulnrichment
CVE-2024-35195 Requests `Session` object does not verify requests after making first request with verify=False
2024-05-20 20:14:48
cbl_mariner
cbl_mariner
CVE-2024-35195 affecting package python-requests for versions less than 2.27.1-7
2024-06-12 22:23:00
osv
osv
Requests `Session` object does not verify requests after making first request with verify=False
2024-05-20 20:15:00
CGA-2qh2-jp77-wp2x
2024-06-06 12:21:38
CGA-6v4c-f9mw-8ghc
2024-06-06 12:24:42
nessus
nessus
SUSE SLES12 Security Update : python-requests (SUSE-SU-2024:2068-1)
2024-06-19 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : python-docker (SUSE-SU-2024:1938-1)
2024-06-11 00:00:00
SUSE SLES15 Security Update : python-docker (SUSE-SU-2024:1937-1)
2024-06-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2024:1937-1)
2024-06-12 00:00:00
Fedora: Security Advisory (FEDORA-2024-efc4802051)
2024-06-07 00:00:00
Mageia: Security Advisory (MGASA-2024-0210)
2024-06-04 00:00:00
ibm
ibm
Security Bulletin: IBM Security QRadar Manager for YARA and SIGMA Rules App for IBM QRadar SIEM is vulnerable to using a component with a known vulnerability (CVE-2024-35195)
2024-07-12 12:44:09
Security Bulletin: Multiple vulnerabilities in IBM Business Automation Workflow Machine Learning Server are addressed with 23.0.2-IF004
2024-07-12 17:12:07
Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Psf Requests (CVE-2024-35195)
2024-06-28 21:20:50
nvd
nvd
CVE-2024-35195
2024-05-20 21:15:09
fedora
fedora
[SECURITY] Fedora 39 Update: mingw-python-requests-2.32.0-1.fc39
2024-05-30 01:20:44
[SECURITY] Fedora 40 Update: mingw-python-requests-2.32.0-1.fc40
2024-05-30 01:22:29
github
github
Requests `Session` object does not verify requests after making first request with verify=False
2024-05-20 20:15:00
cvelist
cvelist
CVE-2024-35195 Requests `Session` object does not verify requests after making first request with verify=False
2024-05-20 20:14:48
alpinelinux
alpinelinux
CVE-2024-35195
2024-05-20 21:15:09
redos
redos
ROS-20240911-03
2024-09-11 00:00:00
veracode
veracode
Improper Certificate Validation
2024-05-23 07:28:42
f5
f5
K000141129: Python vulnerability CVE-2024-35195
2024-09-21 00:00:00
redhatcve
redhatcve
CVE-2024-35195
2024-05-21 11:00:01
cve
cve
CVE-2024-35195
2024-05-20 21:15:09
debiancve
debiancve
CVE-2024-35195
2024-05-20 21:15:09
ubuntucve
ubuntucve
CVE-2024-35195
2024-05-20 00:00:00
wolfi
wolfi
CVE-2024-35195 vulnerabilities
2024-09-27 09:13:12
redhat
redhat
(RHSA-2024:4522) Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-07-12 01:15:48
(RHSA-2024:3781) Moderate: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-06-10 18:26:47

CVSS3

5.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%

JSON
Related for MGASA-2024-0210
vulnrichment1cbl_mariner1osv30nessus12openvas10ibm12nvd1fedora2github1cvelist1alpinelinux1redos1veracode1f51redhatcve1cve1debiancve1ubuntucve1wolfi1redhat2