PyPI/requests-kerberos CVE-2014-8650: unknown, EPSS 3.65%

python-requests-Kerberos through 0.5 does not handle mutual authentication

Action: Upgrade requests-kerberos to 0.6 or later.

pip install requests-kerberos==0.6

Affected

Fixed versions

Sources

• osv: PYSEC-2019-200
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8650
• http://www.openwall.com/lists/oss-security/2014/11/07/1
• https://security-tracker.debian.org/tracker/CVE-2014-8650
• http://www.securityfocus.com/bid/70909
• https://github.com/advisories/GHSA-wh37-37xw-54hr

CVE-2014-8650 · published 2019-12-15T22:15:00Z · modified 2023-11-08T03:57:45.783365Z · JSON