Detections
Analytics
Linux Distros Unpatched Vulnerability : CVE-2024-35195
medium Nessus Plugin ID 227947
Language:
Synopsis
The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be patched.Description
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.- Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of `verify`. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0. (CVE-2024-35195)
Note that Nessus relies on the presence of the package as reported by the vendor.
Solution
There is no known solution at this time.See Also
https://access.redhat.com/security/cve/cve-2024-35195
Plugin Details
Severity: Medium
ID: 227947
File Name: unpatched_CVE_2024_35195.nasl
Version: 1.7
Type: local
Agent: unix
Family: Misc.
Published: 3/5/2025
Updated: 10/14/2025
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 5.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P
CVSS Score Source: CVE-2024-35195
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 5.1
Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:U/RL:U/RC:C
Vulnerability Information
CPE: p-cpe:/a:redhat:enterprise_linux:python3-requests, cpe:/o:debian:debian_linux:11.0, cpe:/o:canonical:ubuntu_linux:20.04:-:lts, cpe:/o:canonical:ubuntu_linux:24.04:-:lts, p-cpe:/a:redhat:enterprise_linux:python2-pip-wheel, cpe:/o:debian:debian_linux:12.0, p-cpe:/a:centos:centos:python2-pip-wheel, p-cpe:/a:debian:debian_linux:requests, cpe:/o:canonical:ubuntu_linux:25.10, p-cpe:/a:centos:centos:python2-pip, cpe:/o:canonical:ubuntu_linux:18.04:-:lts, cpe:/o:centos:centos:8, p-cpe:/a:centos:centos:python3-requests, p-cpe:/a:redhat:enterprise_linux:python-requests, cpe:/o:redhat:enterprise_linux:8, cpe:/o:redhat:enterprise_linux:10, cpe:/o:canonical:ubuntu_linux:14.04:-:lts, p-cpe:/a:redhat:enterprise_linux:python2-pip, cpe:/o:canonical:ubuntu_linux:25.04, cpe:/o:centos:centos:7, cpe:/o:canonical:ubuntu_linux:16.04:-:lts, cpe:/o:redhat:enterprise_linux:7, p-cpe:/a:canonical:ubuntu_linux:python-pip, cpe:/o:canonical:ubuntu_linux:22.04:-:lts, p-cpe:/a:centos:centos:python-requests, p-cpe:/a:canonical:ubuntu_linux:requests
Required KB Items: Host/local_checks_enabled, Host/cpu, global_settings/vendor_unpatched, Host/OS/identifier
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 5/20/2024
Reference Information
CVE: CVE-2024-35195