admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-09-17 18:45:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2016/CVE-2016-90xx/CVE-2016-9013.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

399 lines
14 KiB
JSON
Raw Blame History

{
"id": "CVE-2016-9013",
"sourceIdentifier": "cve@mitre.org",
"published": "2016-12-09T20:59:05.657",
"lastModified": "2024-11-21T03:00:26.243",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easier for remote attackers to obtain access to the database server by leveraging failure to manually specify a password in the database settings TEST dictionary."
},
{
"lang": "es",
"value": "Django 1.8.x en versiones anteriores a 1.8.16, 1.9.x en versiones anteriores a 1.9.11 y 1.10.x en versiones anteriores a 1.10.3 utiliza una contrase\u00f1a embebida para un usuario de base de datos temporal creada al ejecutar pruebas con una base de datos Oracle, lo que hace m\u00e1s f\u00e1cil a atacantes remotos obtener acceso al servidor de la base de datos aprovechando el fallo para especificar manualmente una contrase\u00f1a en la configuraci\u00f3n del diccionario TEST de la base de datos."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.10:*:*:*:*:*:*:*",
"matchCriteriaId": "FE21DA5F-C086-4E98-A5DD-2B96731B56D1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2CE31960-7C68-42F3-B215-B30A87DB67CC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.10.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B3838B8E-8F0E-4F7A-88E6-FFF2590E5302"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "B6B7CAD7-9D4E-4FDB-88E3-1E583210A01F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"matchCriteriaId": "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:*",
"matchCriteriaId": "1AFB20FA-CB00-4729-AB3A-816454C6D096"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9:*:*:*:*:*:*:*",
"matchCriteriaId": "29C40BAC-6DF3-4EA2-A65A-86462DDD8723"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "6B754401-8503-4553-853F-4F6BCD2D2FF2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "019C26C7-EF1F-45BB-934E-521E2E64452E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A18691A7-E4D0-48A4-81A7-89846E991AF2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7C06EBD9-381E-4018-BFDC-E23EA18097B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "7D134048-B64F-45AE-B4A2-26E516CCF37B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0F39B83A-C10B-4B88-9491-2FB8B07D6EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.7:*:*:*:*:*:*:*",
"matchCriteriaId": "64A4030E-F51F-4944-BCE7-E27CD32EC7D4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.8:*:*:*:*:*:*:*",
"matchCriteriaId": "CCC1F046-DAF7-4734-9F80-A3C57857AF18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.9:*:*:*:*:*:*:*",
"matchCriteriaId": "61EE8536-0E8D-477A-B8EA-817CE21D516A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.9.10:*:*:*:*:*:*:*",
"matchCriteriaId": "483D0F44-15C8-43A2-B3AE-331F40DA1A80"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8:*:*:*:*:*:*:*",
"matchCriteriaId": "6BCCB794-1F30-4FC2-A63A-BCE7539BE5DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "2510BAD7-1FB6-4F6F-A2CC-9DE9AD39B4FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D1B388C7-ED4E-4416-969F-32263E7D7AA8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.3:*:*:*:*:*:*:*",
"matchCriteriaId": "63D36984-4C8E-4CDB-8D15-445705FCECF9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "3B324AE6-ADD8-41B9-B250-A6577ACBB364"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F6487058-6768-4AD3-BE27-A0B3D1ACFC08"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "0CFF0538-B111-44A8-ADC2-87E280186257"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.7:*:*:*:*:*:*:*",
"matchCriteriaId": "C3343FF8-53EC-459D-B31C-CD363D04FF42"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.8:*:*:*:*:*:*:*",
"matchCriteriaId": "B9B637E9-067A-4473-9B50-433CCC177982"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.9:*:*:*:*:*:*:*",
"matchCriteriaId": "99A5BF6D-631B-4C8E-9868-579BD79100C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.10:*:*:*:*:*:*:*",
"matchCriteriaId": "280B9958-9163-4126-910A-2EF4B408DFCF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.11:*:*:*:*:*:*:*",
"matchCriteriaId": "6A40373B-301E-4B81-8FA5-28D916142F59"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.12:*:*:*:*:*:*:*",
"matchCriteriaId": "79BB3174-7859-4195-B7B3-BCAA280A6F80"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.13:*:*:*:*:*:*:*",
"matchCriteriaId": "42EF41AF-B2FA-468A-B161-D9FE29CE53EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.14:*:*:*:*:*:*:*",
"matchCriteriaId": "48DF0100-F98E-4997-A8F7-DC07FA4A06D6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:djangoproject:django:1.8.15:*:*:*:*:*:*:*",
"matchCriteriaId": "ECDC5647-8EA7-4595-88C2-541BC489ED2D"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",
"matchCriteriaId": "C729D5D1-ED95-443A-9F53-5D7C2FD9B80C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",
"matchCriteriaId": "772E9557-A371-4664-AE2D-4135AAEB89AA"
}
]
}
]
}
],
"references": [
{
"url": "http://www.debian.org/security/2017/dsa-3835",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/94069",
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1037159",
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.ubuntu.com/usn/USN-3115-1",
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/",
"source": "cve@mitre.org"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/",
"source": "cve@mitre.org"
},
{
"url": "https://www.djangoproject.com/weblog/2016/nov/01/security-releases/",
"source": "cve@mitre.org",
"tags": [
"Release Notes",
"Vendor Advisory"
]
},
{
"url": "http://www.debian.org/security/2017/dsa-3835",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/94069",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1037159",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.ubuntu.com/usn/USN-3115-1",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OG5ROMUPS6C7BXELD3TAUUH7OBYV56WQ/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QXDKJYHN74BWY3P7AR2UZDVJREQMRE6S/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.djangoproject.com/weblog/2016/nov/01/security-releases/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink