Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Python安全漏洞
Vulnerability Description
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 py-bcrypt 0.3之前版本(Python)中存在安全漏洞,该漏洞源于未正确处理并发内存访问。攻击者可借助多个身份验证请求利用该漏洞覆盖密码哈希值,绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A