Insecure cookie handling in Django - CVE-2016-7401

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU698

Insecure cookie handling in Django - CVE-2016-7401

Published: September 30, 2016 / Updated: October 5, 2016


Vulnerability identifier: #VU698
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-7401
CWE-ID: CWE-352
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass certain security restrictions.

The vulnerability exists due to interraction error between Django's cookie parsing code and Google Analytics. A remote attacker can set arbitrary cookies and bypass CSRF protection, implemented by web application.

Successful exploitation of this vulnerability may allow an attacker to bypass various website security mechanisms, based on cookies.


Affected software

Django
Arch Linux
Fedora
Ubuntu
Tornado
Red Hat OpenStack
python-django (Red Hat package)
python-django

How to mitigate CVE-2016-7401


Red Hat OpenStack - addressed in versions 8, 9
python-django (Red Hat package) - addressed in versions 1.6.11-6.el6ost, 1.6.11-6.el7ost, 1.8.15-1.el7ost
python-django - addressed in versions 1.6.11.6-1.el7, 1.8.15-1.fc23, 1.9.10-1.fc24, 1.9.10-1.fc25

External References

Related Security Bulletins