CVE-2007-0405 Django Improper Access Control
MediumCVSS 6.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi django(PyPI) | >= 0.95, < 1.0 | 1.0 |
| pypi django(PyPI) | = 0.95 | No fix listed |
| django project django | = 0.95 | No fix listed |
| debian/python-django(Debian:12) | < 0.95.1-1 | 0.95.1-1 |
| debian/python-django(Debian:13) | < 0.95.1-1 | 0.95.1-1 |
| debian/python-django(Debian:14) | < 0.95.1-1 | 0.95.1-1 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- django-request-session-hijacking(31628) vdb-entry
- github.com product
- code.djangoproject.com
- 23826 patch third-party-advisory vendor-advisory
- 22138 vdb-entry
- pypi.org product
- github.com vendor-advisory
- Debian Security Tracker CVE-2007-0405 vendor-advisory
- bugs.debian.org issue-tracking