Lucene search
PRIOn knowledge basePRION:CVE-2015-3982HistoryJun 02, 2015 - 2:59 p.m.
Design/Logic Flaw
2015-06-0214:59:00
PRIOn knowledge base
www.prio-n.com
4
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.
Related
ubuntucve
ubuntucve
CVE-2015-3982
2015-05-20 00:00:00
cvelist
cvelist
CVE-2015-3982
2015-06-02 14:00:00
nessus
nessus
nvd
nvd
CVE-2015-3982
2015-06-02 14:59:10
github
github
Django allows user sessions hijacking via an empty string in the session key
2022-05-17 03:29:56
osv
osv
PYSEC-2015-19
2015-06-02 14:59:00
openvas
openvas
Fedora Update for python-django FEDORA-2015-8691
2015-07-07 00:00:00
Fedora Update for python-django FEDORA-2015-11403
2015-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: python-django-1.8.2-1.fc22
2015-05-30 15:38:05
[SECURITY] Fedora 22 Update: python-django-1.8.3-1.fc22
2015-07-23 08:54:39
cve
cve
CVE-2015-3982
2015-06-02 14:59:10
debiancve
debiancve
CVE-2015-3982
2015-06-02 14:59:10
freebsd
freebsd
django -- Fixed session flushing in the cached_db backend
2015-05-20 00:00:00