VULNERABILITY INTELLIGENCE

CVE-2013-1895

CVSS score7.5 HIGH
EPSS probability2.83%
CISA KEVNot currently listed
Published2020-01-28
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Weakness classification

  • nvd@nist.gov: CWE-307

Primary references