PT-2023-10126 · Unknown · Pylons Horus

CVE-2014-125056 · Publicado 2023-01-07 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Baixa

Vetor base

AV:A/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pylons horus (affected versions not specified)

Description A vulnerability was found in Pylons horus, classified as problematic, affecting some unknown functionality of the file horus/flows/local/services.py. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high, and the exploitation is known to be difficult.

Recommendations To fix this issue, it is recommended to apply a patch, specifically the one identified as fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec. As a temporary workaround, consider restricting access to the affected functionality in the horus/flows/local/services.py file until the patch is applied.

Correção

Enumeração de Fraquezas

CWE-208

Identificadores relacionados

CVE-2014-125056

Produtos afetados

Pylons Horus

Referências · 6

• https://github.com/Pylons/horus/commit/fd56ccb62ce3cbdab0484fe4f9c25c4eda6c57ec · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2014-125056 · Nota de Segurança
• https://vuldb.com/?id.217598 · Nota
• https://t.me/cvenotify/41479 · Publicação no Telegram
• https://vuldb.com/?ctiid.217598 · Nota
• https://t.me/cibsecurity/56115 · Publicação no Telegram