Опубликовано: 02 янв. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.8
CVSS3: 8.1
Описание
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 3.0.0-3ubuntu2.2 |
| devel | released | 4.0.2-0ubuntu3 |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/xenial | released | 3.0.0-3ubuntu1.16.04.3 |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needs-triage | |
| xenial | released | 3.0.0-3ubuntu1.16.04.3 |
| zesty | released | 3.0.0-3ubuntu1.17.04.3 |
Показывать по
10
EPSS
Процентиль: 84%
0.02083
Низкий
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
CVSS3: 6.5
redhat
больше 8 лет назад
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.
CVSS3: 8.1
nvd
около 8 лет назад
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.
CVSS3: 8.1
debian
около 8 лет назад
pysaml2 version 4.4.0 and older accept any password when run with pyth ...
EPSS
Процентиль: 84%
0.02083
Низкий
6.8 Medium
CVSS2
8.1 High
CVSS3