DeutschShown in its original language — a full translation is planned for a future version.
Python: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
view advisory published 2014-09-21
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-1830US | medium5.0 | — | ||
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request. | ||||
| CVE-2014-1829US | medium5.0 | — | ||
Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. | ||||
02
references
External citations — patches, advisories, analysis.
- Meldung auf der OSS-Security Mailingliste vom 2014-09-21external
- Ubuntu Security Notice USN-2382-1 vom 2014-10-14external
- openSUSE Security Update OPENSUSE-SU-2026:12038-1 vom 2026-10-15external
- WID-SEC-W-2026-3994 - CSAF Versionself
- WID-SEC-2026-3994 - Portal Versionself
- Debian Security Advisory DSA-3146-1 vom 2015-01-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan