CVE-2018-6188

See a problem?

Source

https://nvd.nist.gov/vuln/detail/CVE-2018-6188

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6188.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2018-6188

Aliases

Related

Published

2018-02-05T03:29:00Z

Modified

2024-09-18T03:00:26.814818Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

[none]

Details

django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from the confirmloginallowed() method, as demonstrated by discovering whether a user account is inactive.

References

Affected packages

Alpine:v3.10 / py-django

Package

Name: py-django
Purl: pkg:apk/alpine/py-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.10-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

1.11.9-r0

Alpine:v3.11 / py3-django

Package

Name: py3-django
Purl: pkg:apk/alpine/py3-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.10-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

1.11.9-r0

Alpine:v3.12 / py3-django

Package

Name: py3-django
Purl: pkg:apk/alpine/py3-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.10-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

1.11.9-r0

Alpine:v3.6 / py-django

Package

Name: py-django
Purl: pkg:apk/alpine/py-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.11-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

Alpine:v3.7 / py-django

Package

Name: py-django
Purl: pkg:apk/alpine/py-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.11-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

Alpine:v3.8 / py-django

Package

Name: py-django
Purl: pkg:apk/alpine/py-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.10-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

1.11.9-r0

Alpine:v3.9 / py-django

Package

Name: py-django
Purl: pkg:apk/alpine/py-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.11.10-r0

Affected versions

1.*

1.2.5-r0

1.2.5-r1

1.4.1-r0

1.5-r0

1.5.1-r0

1.5.5-r0

1.5.6-r0

1.5.7-r0

1.5.8-r0

1.6.5-r0

1.6.6-r0

1.7-r0

1.8-r0

1.8.3-r0

1.8.4-r0

1.8.6-r0

1.8.7-r0

1.8.8-r0

1.8.10-r0

1.8.12-r0

1.8.14-r0

1.8.15-r0

1.8.16-r0

1.10.5-r0

1.10.7-r0

1.11-r0

1.11-r1

1.11.5-r0

1.11.9-r0

Debian:11 / python-django

Package

Name: python-django
Purl: pkg:deb/debian/python-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.11.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / python-django

Package

Name: python-django
Purl: pkg:deb/debian/python-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.11.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / python-django

Package

Name: python-django
Purl: pkg:deb/debian/python-django?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.11.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/django/django

Affected ranges

Type: GIT
Repo: https://github.com/django/django
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

7cc155a04ce9579de3cdca59db9a4de11dc5eab9

Last affected

b99221b8bb2a4cd7fd5ac6e5f03e8eb1953d6384

Last affected

c3eafed987ee7356e270eb2826e096692528f816

Last affected

dfe7b85ed7e0c46cb59f545a4eefa9c3fd629f7d

Affected versions

1.*

1.0

1.1

1.11

1.11.1

1.11.2

1.11.3

1.11.4

1.11.5

1.11.6

1.11.7

1.11.8

1.11.9

1.11a1

1.11b1

1.11rc1

1.2

1.2.1

1.3

1.4

1.7a1

1.7a2

2.*

2.0a1

2.0b1