CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple…

published January 28, 2020

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02835 · 86.5th percentile
Published
2020-01-28T14:30Z
EPSS history
Timeline
  • 28 JAN 14:30Z
    The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple…
    cvelistv5