NVD

Id
28463  
Name
CVE-2015-8213  
Description
The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRET_KEY.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-07  
Modified Date
2016-12-07  
Seq
2015-8213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
149646 28463 CVE-2015-8213 FEDORA-2015-a8c8f60fbd  View
149647 28463 CVE-2015-8213 FEDORA-2015-323274d412  View
149648 28463 CVE-2015-8213 openSUSE-SU-2015:2199  View
149649 28463 CVE-2015-8213 openSUSE-SU-2015:2202  View
149650 28463 CVE-2015-8213 RHSA-2016:0129  View
149651 28463 CVE-2015-8213 RHSA-2016:0156  View
149652 28463 CVE-2015-8213 RHSA-2016:0157  View
149653 28463 CVE-2015-8213 RHSA-2016:0158  View
149654 28463 CVE-2015-8213 DSA-3404  View
149655 28463 CVE-2015-8213 77750  View
149656 28463 CVE-2015-8213 1034237  View
149657 28463 CVE-2015-8213 USN-2816-1  View
149658 28463 CVE-2015-8213 https://github.com/django/django/commit/316bc3fc9437c5960c24baceb93c73f1939711e4  View
149659 28463 CVE-2015-8213 https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10811 JVNDB-2015-006131 Django の utils/formats.py の get_format 関数におけるアプリケーションの重要な秘密を取得される脆弱性 Django の utils/formats.py の get_format 関数には、アプリケーションの重要な秘密を取得される脆弱性が存在します。 CVE-2015-8213 85438 CVE-2015-8213 28463 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006131.html 2015-11-24 2015-12-09 View