Test ID:	1.3.6.1.4.1.25623.1.0.118176
Category:	General
Title:	Python < 3.6.14, 3.7.x < 3.7.11, 3.8.x < 3.8.9, 3.9.x < 3.9.3 Python Issue (bpo-42988) - Mac OS X
Summary:	Python is prone to an information disclosure vulnerability via; pydoc getfile.
Description:	Summary: Python is prone to an information disclosure vulnerability via pydoc getfile. Vulnerability Insight: Running 'pydoc -p' allows other local users to extract arbitrary files. The '/getfile?key=path' URL allows to read arbitrary file on the filesystem. Vulnerability Impact: A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. Affected Software/OS: Python prior to version 3.6.14, versions 3.7.x prior to 3.7.11, 3.8.x prior to 3.8.9 and 3.9.x prior to 3.9.3. Solution: Update to version 3.6.14, 3.7.11, 3.8.9, 3.9.3 or later. CVSS Score: 2.7 CVSS Vector: AV:A/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3426 https://security.netapp.com/advisory/ntap-20210629-0003/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNGAFMPIYIVJ47FCF2NK2PIX22HUG35B/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BF2K7HEWADHN6P52R3QLIOX27U3DJ4HI/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DQYPUKLLBOZMKFPO7RD7CENTXHUUEUV7/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VPX7Y5GQDNB4FJTREWONGC4ZSVH7TGHF/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LM5V4VPLBHBEASSAROYPSHXGXGGPHNOE/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25HVHLBGO2KNPXJ3G426QEYSSCECJDU5/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/ https://security.gentoo.org/glsa/202104-04 https://bugzilla.redhat.com/show_bug.cgi?id=1935913 https://www.oracle.com/security-alerts/cpujan2022.html https://www.oracle.com/security-alerts/cpuoct2021.html https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.