Urbanairship Python-Oauth2
2 CVEs affecting Urbanairship Python-Oauth2. Latest disclosed: 2014-05-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-4347 | | 2014-05-20 | The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes… | |
CVE-2013-4346 | | 2014-05-20 | The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed UR… |