Vulnerability in Python Keyring

CVE-2012-4571

Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.004 (29.6th percentile) — read the EPSS interpretation.

Affected products

Python Keyring — versions 0.9.1
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)