What is GHSA-wh37-37xw-54hr?

GHSA-wh37-37xw-54hr is a security advisory published by GitHub Security Advisories with Critical severity. Improper Authentication in requests-kerberos

Which CVE IDs does GHSA-wh37-37xw-54hr cover?

GHSA-wh37-37xw-54hr covers the following CVE IDs: CVE-2014-8650. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wh37-37xw-54hr?

GHSA-wh37-37xw-54hr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-wh37-37xw-54hr?

GHSA-wh37-37xw-54hr affects 1 product, including: pip/requests-kerberos:\u003c 0.6.

GHSA-wh37-37xw-54hrCriticalCVSS 9.8

Improper Authentication in requests-kerberos

Vendor

GitHub Security Advisories

Published

March 10, 2020

Last Modified

October 26, 2024

🔗 CVE IDs covered (1)

CVE-2014-8650 →

📋 Description

python-requests-Kerberos through 0.5 does not handle mutual authentication

🎯 Affected products1

pip/requests-kerberos:< 0.6

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2014-8650
https://github.com/requests/requests-kerberos/issues/35
https://github.com/requests/requests-kerberos/pull/36
https://github.com/mkomitee/requests-kerberos/commit/9c1e08cc17bb6950455a85d33d391ecd2bce6eb6
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650
https://github.com/requests/requests-kerberos/blob/0.6/HISTORY.rst
https://security-tracker.debian.org/tracker/CVE-2014-8650
http://www.openwall.com/lists/oss-security/2014/11/07/1
https://github.com/advisories/GHSA-wh37-37xw-54hr
https://github.com/pypa/advisory-database/tree/main/vulns/requests-kerberos/PYSEC-2019-200.yaml