Security Advisory

CVE-2016-2513

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-04-08 15:00:00

Last updated 2024-08-05 23:32:20

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.

← Browse all CVEs View on cve.org ↗