According to the version of the python-requests package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The Requests package before 2.20.0 for Python sends an     HTTP Authorization header to an http URI upon receiving     a same-hostname https-to-http redirect, which makes it     easier for remote attackers to discover credentials by     sniffing the network.(CVE-2018-18074)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python-requests packages installed that are affected by multiple vulnerabilities:

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to     destination servers when redirected to an HTTPS endpoint. This is a product of how we use     `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent     through the tunnel, the proxy will identify the header in the request itself and remove it prior to     forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must     be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in     Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious     actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.
    (CVE-2023-32681)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python-requests packages installed that are affected by a vulnerability:

  - The Requests package before 2.20.0 for Python sends an     HTTP Authorization header to an http URI upon receiving     a same-hostname https-to-http redirect, which makes it     easier for remote attackers to discover credentials by     sniffing the network. (CVE-2018-18074)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - python-urllib3: Cross-host redirect does not remove     Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the     '\r\n' sequence leading to possible attack on internal     service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error     should be thrown (CVE-2019-11324)

  - python-requests: Redirect from HTTPS to HTTP does not     remove Authorization header (CVE-2018-18074)

Security Fix(es) :

  - python-urllib3: Cross-host redirect does not remove     Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the     '\r\n' sequence leading to possible attack on internal     service (CVE-2019-11236)

  - python-requests: Redirect from HTTPS to HTTP does not     remove Authorization header (CVE-2018-18074)

From Red Hat Security Advisory 2020:0850 :

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0850 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not     remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove     Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the     '\r ' sequence leading to possible attack on internal     service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error     should be thrown (CVE-2019-11324)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0851 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not     remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove     Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the     '\r\n' sequence leading to possible attack on internal     service (CVE-2019-11236)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1605 advisory.

  - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

  - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)

  - python: Cookie domain check returns incorrect results (CVE-2018-20852)

  - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)

  - python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

  - python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056)

  - python: XSS vulnerability in the documentation XML-RPC server in server_title field (CVE-2019-16935)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2081 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1605 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

  - http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before     3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. (CVE-2018-20852)

  - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA     certificates is different from the OS store of CA certificates, which results in SSL connections     succeeding in situations where a verification failure is the correct outcome. This is related to use of     the ssl_context, ca_certs, or ca_certs_dir argument. (CVE-2019-11324)

  - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x     through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An     application that uses the email module and implements some kind of checks on the From/To headers of a     message could be tricked into accepting an email address that should be denied. An attack may be the same     as in CVE-2019-11340; however, this CVE applies to Python more generally. (CVE-2019-16056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the python package has been released.

ID	Name	Product	Family	Published	Updated	Severity
135558	EulerOS 2.0 SP3 : python-requests (EulerOS-SA-2020-1429)	Nessus	Huawei Local Security Checks	4/15/2020	3/18/2024	high
193541	NewStart CGSL CORE 5.04 / MAIN 5.04 : python-requests Multiple Vulnerabilities (NS-SA-2024-0014)	Nessus	NewStart CGSL Local Security Checks	4/18/2024	4/18/2024	high
129889	NewStart CGSL CORE 5.04 / MAIN 5.04 : python-requests Vulnerability (NS-SA-2019-0189)	Nessus	NewStart CGSL Local Security Checks	10/15/2019	4/18/2024	high
134649	Scientific Linux Security Update : python-pip on SL7.x (noarch) (20200317)	Nessus	Scientific Linux Local Security Checks	3/18/2020	3/21/2024	critical
134650	Scientific Linux Security Update : python-virtualenv on SL7.x (noarch) (20200317)	Nessus	Scientific Linux Local Security Checks	3/18/2020	3/21/2024	critical
134688	Oracle Linux 7 : python-pip (ELSA-2020-0850)	Nessus	Oracle Linux Local Security Checks	3/19/2020	3/21/2024	critical
134904	CentOS 7 : python-virtualenv (CESA-2020:0851)	Nessus	CentOS Local Security Checks	3/26/2020	3/20/2024	critical
145889	CentOS 8 : python27:2.7 (CESA-2020:1605)	Nessus	CentOS Local Security Checks	2/1/2021	1/24/2024	critical
180918	Oracle Linux 7 : python-virtualenv (ELSA-2020-2081)	Nessus	Oracle Linux Local Security Checks	9/7/2023	9/7/2023	critical
180976	Oracle Linux 8 : python27:2.7 (ELSA-2020-1605)	Nessus	Oracle Linux Local Security Checks	9/7/2023	9/7/2023	critical
126379	Photon OS 3.0: Python PHSA-2019-3.0-0009	Nessus	PhotonOS Local Security Checks	7/2/2019	5/13/2024	high
164581	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.10.9)	Nessus	Misc.	9/1/2022	5/16/2024	critical

Detections

Analytics

Plugins Search

high

high

high

critical

critical

critical

critical

critical

critical

critical

high

critical