Fedora python-requests CVE-2018-18074 Information Disclosure Vulnerability

description-logoDescription

A credentials-exposure flaw was found in python-requests, where if a request with authentication is redirected (302) from an HTTPS endpoint to an HTTP endpoint on the same host, the Authorization header is not stripped and the credentials can be read in plain text. A man-in-the-middle attacker could exploit this flaw to obtain a user's valid credentials.

affected-products-logoAffected Applications

python-requests

CVE References

CVE-2018-18074