PYSEC-2019-126
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/supervisor/PYSEC-2019-126.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2019-126
- Aliases
- Published
- 2019-09-10T17:15:00Z
- Modified
- 2023-11-08T04:01:02.830789Z
- Summary
- [none]
- Details
-
* DISPUTED * In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inethttpserver, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The maintainer indicated the ability to run an open server will not be removed but an additional warning was added to the documentation.
- References
Affected packages
PyPI / supervisor
Package
- Name
- supervisor
- View open source insights on deps.dev
- Purl
- pkg:pypi/supervisor