Lucene search
Veracode Vulnerability DatabaseVERACODE:25871HistoryJul 13, 2020 - 5:28 a.m.
Information Disclosure
2020-07-1305:28:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
41.6%
django-two-factor-auth is vulnerable to information disclosure. The vulnerability exists as it stores the user’s password in the user session with base64-encoded clear text.
| CPE | Name | Operator | Version |
|---|---|---|---|
| django-two-factor-auth | le | 1.11.0 |
Related
osv
osv
PYSEC-2020-39
2020-07-10 21:15:00
CVE-2020-15105
2020-07-10 21:15:10
User passwords are stored in clear text in the Django session
2020-07-10 20:55:00
cve
cve
CVE-2020-15105
2020-07-10 21:15:10
prion
prion
Authentication flaw
2020-07-10 21:15:00
nvd
nvd
CVE-2020-15105
2020-07-10 21:15:10
cvelist
cvelist
github
github
User passwords are stored in clear text in the Django session
2020-07-10 20:55:00