vulnerability

Huawei EulerOS: CVE-2021-29921: python-pip security update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
05/06/2021
Added
11/15/2022
Modified
11/15/2022

Description

In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.

Solution(s)

huawei-euleros-2_0_sp9-upgrade-python-pip-wheelhuawei-euleros-2_0_sp9-upgrade-python3-pip
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.