Rapid7 Vulnerability & Exploit Database

Oracle Solaris 11: CVE-2019-19844: Vulnerability in Django

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Oracle Solaris 11: CVE-2019-19844: Vulnerability in Django

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
12/18/2019
Created
01/20/2021
Added
01/19/2021
Modified
02/17/2022

Description

Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after case transformation of Unicode characters) would allow an attacker to be sent a password reset token for the matched user account. (One mitigation in the new releases is to send password reset tokens only to the registered user email address.)

Solution(s)

  • oracle-solaris-11-4-upgrade-compress-gzip-1-10-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-c-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-common-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-common-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-common-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gfortran-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-go-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-gcc-gcc-gobjc-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-oracle-odpi-230-2-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-versioning-mercurial-27-4-9-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-versioning-mercurial-4-9-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-versioning-mercurial-hg-git-0-8-12-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-developer-versioning-mercurial-hg-git-27-0-8-12-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-libxml2-2-9-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-astroid-2-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-astroid-27-1-4-8-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-astroid-34-1-4-8-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-astroid-35-2-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-astroid-37-2-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-automat-0-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-automat-27-0-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-automat-34-0-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-automat-35-0-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-automat-37-0-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cheroot-27-6-3-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cheroot-34-6-3-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cheroot-35-6-3-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cheroot-37-6-3-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cheroot-6-3-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cmd2-0-9-13-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cmd2-27-0-6-8-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cmd2-34-0-6-8-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cmd2-35-0-9-13-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cmd2-37-0-9-13-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-colorama-0-4-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-colorama-27-0-4-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-colorama-34-0-4-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-colorama-35-0-4-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-colorama-37-0-4-1-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-constantly-15-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-constantly-27-15-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-constantly-34-15-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-constantly-35-15-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-constantly-37-15-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cryptography-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cryptography-27-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cryptography-34-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cryptography-35-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cryptography-37-2-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cx_oracle-27-6-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cx_oracle-34-6-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cx_oracle-35-6-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cx_oracle-37-6-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cx_oracle-6-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cython-0-29-14-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cython-27-0-29-14-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cython-34-0-29-14-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cython-35-0-29-14-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-cython-37-0-29-14-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-1-11-27-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-27-1-11-27-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-34-1-11-27-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-35-1-11-27-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-37-1-11-27-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-appconf-1-0-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-django-appconf-27-1-0-2-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-hyperlink-19-0-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-hyperlink-27-19-0-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-hyperlink-34-19-0-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-hyperlink-35-19-0-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-hyperlink-37-19-0-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-idna-2-8-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-idna-27-2-8-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-idna-34-2-8-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-idna-35-2-8-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-idna-37-2-8-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-incremental-17-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-incremental-27-17-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-incremental-34-17-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-incremental-35-17-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-incremental-37-17-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-libxml2-27-2-9-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-libxml2-34-2-9-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-libxml2-37-2-9-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pillow-27-5-1-0-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-pillow-34-5-1-0-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-pillow-35-7-0-0-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-pillow-37-7-0-0-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-pillow-7-0-0-11-4-19-0-1-2-0
  • oracle-solaris-11-4-upgrade-library-python-pyatspi2-2-18-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyatspi2-27-2-18-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyatspi2-34-2-18-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyatspi2-35-2-18-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyatspi2-37-2-18-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyparsing-2-4-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyparsing-27-2-4-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyparsing-34-2-4-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyparsing-35-2-4-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyparsing-37-2-4-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyperclip-1-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyperclip-27-1-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyperclip-34-1-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyperclip-35-1-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-pyperclip-37-1-7-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-hamcrest-1-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-hamcrest-27-1-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-hamcrest-34-1-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-hamcrest-35-1-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-hamcrest-37-1-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-18-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-27-18-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-34-18-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-35-18-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-37-18-9-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-web2-27-8-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-python-twisted-web2-8-1-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-rpdb-0-1-6-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-rpdb-27-0-1-6-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-rpdb-34-0-1-6-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-rpdb-35-0-1-6-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-rpdb-37-0-1-6-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-tkinter-27-2-7-17-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-tkinter-34-3-4-10-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-tkinter-35-3-5-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-tkinter-37-3-7-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-wcwidth-0-1-7-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-wcwidth-27-0-1-7-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-wcwidth-34-0-1-7-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-wcwidth-35-0-1-7-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-wcwidth-37-0-1-7-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-webob-1-8-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-webob-27-1-8-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-webob-34-1-8-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-webob-35-1-8-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-webob-37-1-8-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-xattr-0-9-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-xattr-27-0-9-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-xattr-34-0-9-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-library-python-xattr-35-0-9-3-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-runtime-python-27-2-7-17-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-runtime-python-27-tests-2-7-17-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-runtime-python-34-3-4-10-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-runtime-python-35-3-5-9-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-runtime-python-37-3-7-5-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-c-runtime-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gfortran-runtime-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-go-runtime-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-gobjc-runtime-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-5-5-5-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-7-7-3-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-system-library-gcc-gcc-runtime-9-9-2-0-11-4-19-0-1-1-0
  • oracle-solaris-11-4-upgrade-text-texinfo-6-1-11-4-19-0-1-1-0

References

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;