CVE-2018-20852 Information disclosure in n/a
Attackers can steal cookies by exploiting domain validation flaws in Python's cookiejar, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2018-20852?
CVE-2018-20852 is a medium-severity vulnerability in Python Python, published on 13 Jul 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server. An attacker may abuse this flaw by using a server with a hostname that has another valid hostname as a suffix (e.g., pythonicexample.com to steal cookies for example.com). When a program uses http.cookiejar.DefaultPolicy and tries to do an HTTP connection to an attacker-controlled server, existing cookies can be leaked to the attacker. This affects 2.x through 2.7.16, 3.x before 3.4.10, 3.5.x before 3.5.7, 3.6.x before 3.6.9, and 3.7.x before 3.7.3.
Weakness: CWE-20
Which versions are affected by CVE-2018-20852?
It affects 1 product.
Linux distribution packages (12)
python SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 2.7.14-7.17.1 |
python-base SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 2.7.14-7.17.1 |
python SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 2.7.14-7.17.1 |
python-base SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 2.7.14-7.17.1 |
python SUSE:Linux Enterprise Module for Desktop Applications 15 | All versions | 2.7.14-7.17.1 |
python SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 | All versions | 2.7.14-7.17.1 |
python SUSE:Linux Enterprise Module for Python 2 15 SP1 | All versions | 2.7.14-7.17.1 |
python-base SUSE:Linux Enterprise Module for Python 2 15 SP1 | All versions | 2.7.14-7.17.1 |
python openSUSE:Leap 15.0 | All versions | 2.7.14-lp150.6.17.1 |
python openSUSE:Leap 15.1 | All versions | 2.7.14-lp151.10.7.1 |
python-base openSUSE:Leap 15.1 | All versions | 2.7.14-lp151.10.7.1 |
python-doc openSUSE:Leap 15.1 | All versions | 2.7.14-lp151.10.7.1 |
Products include Python Python.
How do I fix CVE-2018-20852?
Upgrade to a fixed version.
Is CVE-2018-20852 being exploited?
There is no known exploitation of CVE-2018-20852 in the wild and no public exploit code.
Other vulnerabilities in Python Python
Sources
Also known as DEBIAN-CVE-2018-20852, DLA-1889-1, DLA-1906-1, GHSA-p5ff-6x75-2mgp, SUSE-SU-2019:2114-1, UBUNTU-CVE-2018-20852 and 2 more.