Vulnerability in Urbanairship Python-Oauth2

CVE-2013-4347

The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.024 (82.6th percentile) — read the EPSS interpretation.