CVE-2015-4082
2 advisories.
PyPI/attic CVE-2015-4082: medium 6.5
attic has improper verification of unencrypted backups
Action: Upgrade attic to 0.15 or later.
pip install attic==0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15 | - |
Fixed versions
| 0.15 |
Sources
- osv: GHSA-5x6q-ffwj-8vcf
- https://nvd.nist.gov/vuln/detail/CVE-2015-4082
- https://github.com/jborg/attic/issues/271
- https://github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072
- https://github.com/jborg/attic
- https://github.com/pypa/advisory-database/tree/main/vulns/attic/PYSEC-2017-6.yaml
- https://web.archive.org/web/20200517225455/http://www.securityfocus.com/bid/74821
- http://www.openwall.com/lists/oss-security/2015/05/31/3
- http://www.securityfocus.com/bid/74821
CVE-2015-4082 · published · modified · JSON
PyPI/attic CVE-2015-4082: unknown
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive informat
Action: Upgrade attic to 0.15 or later.
pip install attic==0.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15 | - |
Fixed versions
| 0.15 |
Sources
- osv: PYSEC-2017-6
- https://github.com/jborg/attic/issues/271
- https://github.com/jborg/attic/commit/78f9ad1faba7193ca7f0acccbc13b1ff6ebf9072
- http://www.securityfocus.com/bid/74821
- http://www.openwall.com/lists/oss-security/2015/05/31/3
- https://github.com/advisories/GHSA-5x6q-ffwj-8vcf
CVE-2015-4082 · published · modified · JSON