medium6.5
CVE-2007-0405
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated use…
Impact
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Django Project | Django | Version 0.95 |
References
- NVD record
- CVE.org record
- http://code.djangoproject.com/changeset/3754
- http://secunia.com/advisories/23826
- http://www.securityfocus.com/bid/22138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31628
- http://code.djangoproject.com/changeset/3754
- http://secunia.com/advisories/23826
- http://www.securityfocus.com/bid/22138
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31628