CVE ID:	CVE-2015-2296
Description:	The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
Test IDs:	1.3.6.1.4.1.25623.1.1.10.2015.0180   1.3.6.1.4.1.25623.1.0.120537   1.3.6.1.4.1.25623.1.0.842131   1.3.6.1.4.1.25623.1.0.869452   1.3.6.1.4.1.25623.1.0.120448   1.3.6.1.4.1.25623.1.1.4.2016.0114.1   1.3.6.1.4.1.25623.1.1.10.2015.0120   1.3.6.1.4.1.25623.1.0.869139   1.3.6.1.4.1.25623.1.0.869140
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2296 http://lists.fedoraproject.org/pipermail/package-announce/2015-March/153594.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:133 http://www.openwall.com/lists/oss-security/2015/03/14/4 http://www.openwall.com/lists/oss-security/2015/03/15/1 http://www.ubuntu.com/usn/USN-2531-1