Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : https://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Django.

Impacted products: Fedora, Ubuntu.

Severity: 2/4.

Creation date: 02/11/2016.

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Django.

An attacker can bypass security features via Oracle Database Test,
in order to escalate his privileges. [severity:2/4; CVE-2016-9013]

An attacker can bypass security features via DNS Rebinding Attack,
in order to obtain sensitive information. [severity:2/4;
CVE-2016-9014]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

https://vigilance.fr/vulnerability/Django-two-vulnerabilities-21004