Vulnerabilities (CVE)

Filtered by vendor Python Subscribe
Filtered by product Py-bcrypt
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-1895 2 Fedoraproject, Python 2 Fedora, Py-bcrypt 2023-12-10 5.0 MEDIUM 7.5 HIGH
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.