Lucene search
HistoryJul 10, 2024 - 5:15 a.m.
CVE-2024-39329
django
authentication
timing attack
cve-2024-39329
user enumeration
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
15.8%
An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. The django.contrib.auth.backends.ModelBackend.authenticate() method allows remote attackers to enumerate users via a timing attack involving login requests for users with an unusable password.
Related
vulnrichment
vulnrichment
CVE-2024-39329
2024-07-10 00:00:00
veracode
veracode
Timing Attack
2024-07-11 04:47:34
wolfi
wolfi
CVE-2024-39329 vulnerabilities
2024-09-18 21:11:55
cvelist
cvelist
CVE-2024-39329
2024-07-10 00:00:00
github
github
Django vulnerable to user enumeration attack
2024-07-10 06:33:52
redhatcve
redhatcve
CVE-2024-39329
2024-07-18 06:34:24
cve
cve
CVE-2024-39329
2024-07-10 05:15:12
debiancve
debiancve
CVE-2024-39329
2024-07-10 05:15:12
osv
osv
CVE-2024-39329
2024-07-09 14:00:00
Django vulnerable to user enumeration attack
2024-07-10 06:33:52
PYSEC-2024-57
2024-07-10 05:15:00
ubuntucve
ubuntucve
CVE-2024-39329
2024-07-09 00:00:00
freebsd
freebsd
Django -- multiple vulnerabilities
2024-07-01 00:00:00
nessus
nessus
Fedora 39 : python-django4.2 (2024-a7eef0ca7b)
2024-07-25 00:00:00
Fedora 40 : python-django4.2 (2024-d05d37ead7)
2024-07-25 00:00:00
Fedora 39 : python-django (2024-82547e3e16)
2024-07-25 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6888-1)
2024-07-10 00:00:00
Django 4.x < 4.2.14, 5.x < 5.0.7 Multiple Vulnerabilities - Linux
2024-07-12 00:00:00
Ubuntu: Security Advisory (USN-6888-2)
2024-07-12 00:00:00
ubuntu
ubuntu
Django vulnerabilities
2024-07-09 00:00:00
Django vulnerabilities
2024-07-11 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: python-django-4.2.14-2.fc40
2024-07-19 01:46:40
[SECURITY] Fedora 40 Update: python-django4.2-4.2.14-1.fc40
2024-07-19 01:46:41
[SECURITY] Fedora 39 Update: python-django4.2-4.2.14-1.fc39
2024-07-19 02:22:03
ibm
ibm
redhat
redhat
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
15.8%
Related for NVD:CVE-2024-39329