CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2014-1829 – Ubuntu Security Notice USN-2382-1
https://notcve.org/view.php?id=CVE-2014-1829
14 Oct 2014 — Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. Requests(también conocido como python-requests) anterior a 2.3.0 permite a atacantes remotos obtener una contraseña netrc leyendo la cabecera 'Authorization' en una petición de redirección. Python-requests was found to have a vulnerability, where the attacker can retrieve the passwords from ~/.netrc file through redirect requests, if the user has their pas... • http://advisories.mageia.org/MGASA-2014-0409.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2014-1830 – Ubuntu Security Notice USN-2382-1
https://notcve.org/view.php?id=CVE-2014-1830
14 Oct 2014 — Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request. Requests (también conocido como python-requests) anterior a 2.3.0 permite a servidores remotos obtener información sensible leyendo la cabecera en 'Proxy-Authorization' con una petición de redirección. Python-requests was found to have a vulnerability, where the attacker can retrieve the passwords from ~/.netrc file through redirect requests, if... • http://advisories.mageia.org/MGASA-2014-0409.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •