Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI environment prior to Django 3.0, did not correctly separate request scopes in Channels 3.0. In many cases this would result in a crash but, with correct timing, responses could be sent to the wrong client, resulting in potential leakage of session identifiers and other sensitive data. Note that this affects only the legacy Channels provided class, and not Django's similar ASGIHandler, available from Django 3.0.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different     request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI     environment prior to Django 3.0, did not correctly separate request scopes in Channels 3.0. In many cases     this would result in a crash but, with correct timing, responses could be sent to the wrong client,     resulting in potential leakage of session identifiers and other sensitive data. Note that this affects     only the legacy Channels provided class, and not Django's similar ASGIHandler, available from Django 3.0.
    (CVE-2020-35681)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Django Channels 3.x before 3.0.3 allows remote attackers to obtain sensitive information from a different
    request scope. The legacy channels.http.AsgiHandler class, used for handling HTTP type requests in an ASGI
    environment prior to Django 3.0, did not correctly separate request scopes in Channels 3.0. In many cases
    this would result in a crash but, with correct timing, responses could be sent to the wrong client,
    resulting in potential leakage of session identifiers and other sensitive data. Note that this affects
    only the legacy Channels provided class, and not Django's similar ASGIHandler, available from Django 3.0.
    (CVE-2020-35681)

ID	Name	Product	Family	Severity
256273	Linux Distros Unpatched Vulnerability : CVE-2020-35681	Nessus	Misc.	high
419076	SCA: security update for channels (GHSA-v542-8q9x-cffc)	Tenable Cloud Security	SCA Checks	high
419076	SCA: security update for channels (GHSA-v542-8q9x-cffc)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2020-35681

high

Tenable Plugins

high

high

high