Lucene search

Veracode Vulnerability DatabaseVERACODE:32488

HistoryOct 13, 2021 - 7:13 p.m.

Access Restriction Bypass

2021-10-1319:13:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

py-bcrypt

vulnerability

improper access control

password hash overwriting

security restrictions

EPSS

0.016

Percentile

87.6%

JSON

py-bcrypt is vulnerable to Improper Access Control. The vulnerability exists due to improper handling of concurrent memory access in py-bcrypt module which triggers password hash overwriting, allowing an attacker to bypass security restrictions.

References

lists.fedoraproject.org/pipermail/package-announce/2013-April/101382.html

lists.fedoraproject.org/pipermail/package-announce/2013-April/101387.html

www.openwall.com/lists/oss-security/2013/03/26/2

www.securityfocus.com/bid/58702

bugzilla.redhat.com/show_bug.cgi?id=927510

exchange.xforce.ibmcloud.com/vulnerabilities/83039