Description
python-requests-Kerberos through 0.5 does not handle mutual authentication
References (4)
Core 4
Core References
Patch, Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2014-8650
Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650
Third Party Advisory, VDB Entry x_refsource_misc
http://www.securityfocus.com/bid/70909
Mailing List, Patch, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2014/11/07/1
Scores
CVSS v3
9.8
EPSS
0.0362
EPSS Percentile
88.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (5)
debian/debian_linux
8.0
debian/debian_linux
9.0
debian/debian_linux
10.0
pypi/requests-kerberos
0 - 0.6PyPI
requests-kerberos_project/requests-kerberos
< 0.5
Published
Dec 15, 2019
Tracked Since
Feb 18, 2026