Security Advisory

CVE-2013-1895

7.5
HIGH

Vulnerability Description

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
Published Date January 28, 2020
Official Source NIST NVD Advisory