CVE-2013-1895 Vulnerability Details

  /     /     /  

CVE-2013-1895 Metadata Quick Info

CVE Published: 28/01/2020 | CVE Updated: 06/08/2024 | CVE Year: 2013
Source: redhat | Vendor: py-bcrypt | Product: py-bcrypt
Status : PUBLISHED

---

CVE-2013-1895 Description

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Other
Source: py-bcrypt

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).