CVE-2014-1830

Published: Oct 15, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

Affected (2)

Products: Opensuse: Opensuse · Python: Requests

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Python Requests	Up to 2.2.1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (12)

http://advisories.mageia.org/MGASA-2014-0409.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-updates/2016-01/msg00095.html

Source: cve@mitre.org

http://www.debian.org/security/2015/dsa-3146

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:133

Source: cve@mitre.org

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108

Source: cve@mitre.org

Vendor Advisory

https://github.com/kennethreitz/requests/issues/1885

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0409.html