Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-2513
HistoryMar 01, 2016 - 12:00 a.m.

CVE-2016-2513

2016-03-0100:00:00
ubuntu.com
ubuntu.com
7

0.007 Low

EPSS

Percentile

80.6%

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and
1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing
attack involving login requests.

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchpython-django< 1.3.1-4ubuntu1.20UNKNOWN
ubuntu14.04noarchpython-django< 1.6.1-2ubuntu0.12UNKNOWN
ubuntu15.10noarchpython-django< 1.7.9-1ubuntu5.2UNKNOWN