Skip to content
OpenAdvisories
Medium WID-SEC-2026-3994 2 CVEs

Python: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Sep 21, 2014 · Updated Oct 15, 2026 · Revision 8 · de-DE

Vendor: Debian Vendor: SUSE Vendor: Ubuntu Product: Linux Product: Linux Wheezy (7.0) Product: openSUSE Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Python ausnutzen, um Informationen offenzulegen.

Product

Python ist eine universelle, üblicherweise interpretierte höhere Programmiersprache.

Vulnerabilities 2

  • Medium 5.3
    CVE-2014-1829

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-1830

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI

Revision history

  1. #8

    Neue Updates von openSUSE aufgenommen

  2. #5

    New remediations available

  3. #6

    Version nicht vorhanden

  4. #7

    Version nicht vorhanden

  5. #3

    New remediations available

  6. #4

    Version nicht vorhanden

  7. #1

    Initial Release

  8. #2

    Version nicht vorhanden

References