According to the version of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In the urllib3 library through 1.24.1 for Python, CRLF     injection is possible if the attacker controls the     request parameter.(CVE-2019-11236)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in urllib2 in Python 2.x     through 2.7.16 and urllib in Python 3.x through 3.7.3.
    CRLF injection is possible if the attacker controls a     url parameter, as demonstrated by the first argument to     urllib.request.urlopen with \r\n (specifically in the     query string after a ? character) followed by an HTTP     header or a Redis command.(CVE-2019-9740)

  - In the urllib3 library through 1.24.1 for Python, CRLF     injection is possible if the attacker controls the     request parameter.(CVE-2019-11236)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python-urllib3 fixes the following issues :

Security issues fixed :

  - CVE-2019-9740: Fixed CRLF injection issue (bsc#1129071).

  - CVE-2019-11324: Fixed invalid CA certificat verification     (bsc#1132900).

  - CVE-2019-11236: Fixed CRLF injection via request     parameter (bsc#1132663).

  - CVE-2018-20060: Remove Authorization header when     redirecting cross-host (bsc#1119376).

This update was imported from the SUSE:SLE-15:Update update project.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has python-urllib3 packages installed that are affected by multiple vulnerabilities:

  - urllib3 before version 1.23 does not remove the     Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port,     or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts     or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF     injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0851 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - python-urllib3: Cross-host redirect does not remove     Authorization header allow for credential exposure     (CVE-2018-20060)

  - python-urllib3: CRLF injection due to not encoding the     '\r\n' sequence leading to possible attack on internal     service (CVE-2019-11236)

  - python-requests: Redirect from HTTPS to HTTP does not     remove Authorization header (CVE-2018-18074)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2081 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1916 advisory.

    [9.0.3-16]
    - Add four new patches for CVEs in bundled urllib3 and requests     CVE-2018-20060, CVE-2019-11236, CVE-2019-11324, CVE-2018-18074     Resolves: rhbz#1649153     Resolves: rhbz#1700824     Resolves: rhbz#1702473     Resolves: rhbz#1643829

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1605 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

  - http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not     correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An     attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix     (e.g., pythonicexample.com to steal cookies for example.com). When a program uses     http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing     cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before     3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3. (CVE-2018-20852)

  - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA     certificates is different from the OS store of CA certificates, which results in SSL connections     succeeding in situations where a verification failure is the correct outcome. This is related to use of     the ssl_context, ca_certs, or ca_certs_dir argument. (CVE-2019-11324)

  - An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x     through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An     application that uses the email module and implements some kind of checks on the From/To headers of a     message could be tricked into accepting an email address that should be denied. An attack may be the same     as in CVE-2019-11340; however, this CVE applies to Python more generally. (CVE-2019-16056)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2068 advisory.

  - The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon     receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover     credentials by sniffing the network. (CVE-2018-18074)

  - urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

  - In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

  - The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA     certificates is different from the OS store of CA certificates, which results in SSL connections     succeeding in situations where a verification failure is the correct outcome. This is related to use of     the ssl_context, ca_certs, or ca_certs_dir argument. (CVE-2019-11324)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4513:01 advisory.

    * python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure     (CVE-2018-20060)
      * python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on     internal service (CVE-2019-11236)
      * python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In the urllib3 library through 1.24.1 for Python, CRLF     injection is possible if the attacker controls the     request parameter.(CVE-2019-11236)

  - An issue was discovered in urllib2 in Python 2.x     through 2.7.16 and urllib in Python 3.x through 3.7.3.
    CRLF injection is possible if the attacker controls a     url parameter, as demonstrated by the first argument to     urllib.request.urlopen with \r\n (specifically in the     query string after a ? character) followed by an HTTP     header or a Redis command.(CVE-2019-9740)

  - urllib3 before version 1.23 does not remove the     Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port,     or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts     or transmitted in cleartext.(CVE-2018-20060)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of python-virtualenv installed on the remote host is prior to 15.1.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1413 advisory.

    urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin     redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the     Authorization header to be exposed to unintended hosts or transmitted in cleartext. (CVE-2018-20060)

    In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the     request parameter. (CVE-2019-11236)

    A credentials-exposure flaw was found in python-requests, where if a request with authentication is     redirected (302) from an HTTPS endpoint to an HTTP endpoint on the same host, the Authorization header is     not stripped and the credentials can be read in plain text. A man-in-the-middle attacker could exploit     this flaw to obtain a user's valid credentials. (CVE-2018-18074)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
134743	EulerOS Virtualization 3.0.2.2 : python-urllib3 (EulerOS-SA-2020-1277)	Nessus	Huawei Local Security Checks	2020/3/20	2024/3/21	medium
137485	EulerOS 2.0 SP2 : python-urllib3 (EulerOS-SA-2020-1643)	Nessus	Huawei Local Security Checks	2020/6/17	2024/3/6	medium
128864	openSUSE Security Update : python-urllib3 (openSUSE-2019-2131)	Nessus	SuSE Local Security Checks	2019/9/16	2024/4/25	critical
130202	NewStart CGSL CORE 5.04 / MAIN 5.04 : python-urllib3 Multiple Vulnerabilities (NS-SA-2019-0199)	Nessus	NewStart CGSL Local Security Checks	2019/10/24	2024/4/17	critical
134904	CentOS 7 : python-virtualenv (RHSA-2020:0851)	Nessus	CentOS Local Security Checks	2020/3/26	2024/10/9	critical
137039	Scientific Linux Security Update : python-virtualenv on SL7.x (noarch) (20200512)	Nessus	Scientific Linux Local Security Checks	2020/6/2	2024/3/8	critical
180918	Oracle Linux 7 : python-virtualenv (ELSA-2020-2081)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical
180967	Oracle Linux 8 : python-pip (ELSA-2020-1916)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical
180976	Oracle Linux 8 : python27:2.7 (ELSA-2020-1605)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical
180985	Oracle Linux 7 : python-pip (ELSA-2020-2068)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/11/1	critical
294123	MiracleLinux 7 : python-virtualenv-15.1.0-4.el7 (AXSA:2020-4513:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
130701	EulerOS 2.0 SP3 : python-urllib3 (EulerOS-SA-2019-2239)	Nessus	Huawei Local Security Checks	2019/11/8	2024/4/15	critical
135931	Amazon Linux 2 : python-virtualenv (ALAS-2020-1413)	Nessus	Amazon Linux Local Security Checks	2020/4/24	2024/12/11	critical

检测

插件搜索

medium

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical