CVE-2021-3572

Published: Nov 10, 2021Modified: Nov 21, 2024

5.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.1 / Impact: 3.6

Source: NVD

Description

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

Affected (6)

Products: Pypa: Pip · Oracle: Agile Plm, Communications Cloud Native Core Network Function Cloud Native Environment, Communications Cloud Native Core Policy

1 product

3 products

Communications Cloud Native Core Network Function Cloud Native Environment

Communications Cloud Native Core Policy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pypa Pip	Before 21.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Oracle Agile Plm	Version 9.3.6
Oracle Communications Cloud Native Core Network Function Cloud Native Environment	Version 1.10.0
Oracle Communications Cloud Native Core Network Function Cloud Native Environment	Version 22.1.0
Oracle Communications Cloud Native Core Policy	Version 1.15.0
Oracle Communications Cloud Native Core Policy	Version 22.1.3