Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2016.0334
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2016-0334)
Zusammenfassung:	The remote host is missing an update for the 'python-django' package(s) announced via the MGASA-2016-0334 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'python-django' package(s) announced via the MGASA-2016-0334 advisory. Vulnerability Insight: CVE-2016-7401: CSRF protection bypass on a site with Google Analytics An interaction between Google Analytics and Django's cookie parsing could allow an attacker to set arbitrary cookies leading to a bypass of CSRF protection. Affected Software/OS: 'python-django' package(s) on Mageia 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7401 BugTraq ID: 93182 http://www.securityfocus.com/bid/93182 Debian Security Information: DSA-3678 (Google Search) http://www.debian.org/security/2016/dsa-3678 RedHat Security Advisories: RHSA-2016:2038 http://rhn.redhat.com/errata/RHSA-2016-2038.html RedHat Security Advisories: RHSA-2016:2039 http://rhn.redhat.com/errata/RHSA-2016-2039.html RedHat Security Advisories: RHSA-2016:2040 http://rhn.redhat.com/errata/RHSA-2016-2040.html RedHat Security Advisories: RHSA-2016:2041 http://rhn.redhat.com/errata/RHSA-2016-2041.html RedHat Security Advisories: RHSA-2016:2042 http://rhn.redhat.com/errata/RHSA-2016-2042.html RedHat Security Advisories: RHSA-2016:2043 http://rhn.redhat.com/errata/RHSA-2016-2043.html http://www.securitytracker.com/id/1036899 http://www.ubuntu.com/usn/USN-3089-1
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.