Vulnerability CVE-2019-10682
Published: 2020-03-18

Description:
django-nopassword before 5.0.0 stores cleartext secrets in the database.

Type:

CWE-522

 (Insufficiently Protected Credentials)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Django-nopassword project -> Django-nopassword 

 References:
https://github.com/relekang/django-nopassword/blob/8e8cfc765ee00adfed120c2c79bf71ef856e9022/nopassword/models.py#L14
https://github.com/relekang/django-nopassword/commit/d8b4615f5fbfe3997d96cf4cb3e342406396193c
https://github.com/relekang/django-nopassword/compare/v4.0.1...v5.0.0
Copyright 2024, cxsecurity.com

 

Back to Top