CVE-2011-4136
MEDIUM severity · CVSS 5.8 · Improper input validation
5.8CVSS MEDIUM
Summary
django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which allows remote attackers to modify a session by triggering use of a key that is equal to that session's identifier.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impact—
Availability impact—
Exploit probability (EPSS)2%
AV:N/AC:M/Au:N/C:N/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://openwall.com/lists/oss-security/2011/09/11/1 ↗
Additional information
- NVD record
- http://openwall.com/lists/oss-security/2011/09/11/1Patch
- http://openwall.com/lists/oss-security/2011/09/13/2Patch
- https://bugzilla.redhat.com/show_bug.cgi?id=737366Patch
- https://www.djangoproject.com/weblog/2011/sep/09/Patch
- https://www.djangoproject.com/weblog/2011/sep/10/127/Patch
- http://secunia.com/advisories/46614
- http://www.debian.org/security/2011/dsa-2332
- https://hermes.opensuse.org/messages/14700881