Concurrent Memory Access Vulnerability in py-bcrypt Module

CVE-2013-1895 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.

Learn more about our Web Application Penetration Testing UK.