The py-bcrypt module prior to 0.3 for Python does not properly handle concurrent memory access, which allows malicious users to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
python py-bcrypt |
||
fedoraproject fedora 17 |
||
fedoraproject fedora 18 |
Vulmon