Lucene search
Veracode Vulnerability DatabaseVERACODE:22747HistoryMar 19, 2020 - 8:58 a.m.
Information Disclosure
2020-03-1908:58:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
EPSS
0.002
Percentile
52.1%
django_nopassword is vulnerable to information disclosure. The vulnerability exists because it stores the sensitive login codes in the database and compares the codes in plaintext formats at the time of login.
Related
cvelist
cvelist
CVE-2019-10682
2020-03-18 15:01:13
osv
osv
PYSEC-2020-229
2020-03-18 15:15:00
django-nopassword stores secrets in cleartext
2020-06-05 16:09:19
CVE-2019-10682
2020-03-18 15:15:11
github
github
django-nopassword stores secrets in cleartext
2020-06-05 16:09:19
prion
prion
Default credentials
2020-03-18 15:15:00
nvd
nvd
CVE-2019-10682
2020-03-18 15:15:11
cve
cve
CVE-2019-10682
2020-03-18 15:15:11