CVE-2016-1000111: twisted Forced Browsing

CVSS: 5.3v3.1MediumModified

AliasesMGASA-2016-0340SUSE-SU-2017:0114-1GHSA-3gqj-cmxr-p4x2+7 more

Published 11-03-2020Last modified 06-08-2024

Vulnerability summary

CVE-2016-1000111 is a medium (CVSS 5.3) Forced Browsing vulnerability in twisted. EPSS estimates a 2.76% chance of exploitation in the next 30 days, higher than 86% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.3/10

010

Medium · v3.1 (NVD)

EPSS score

2.76%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

11-03-2020
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

CVSS metrics

7 scores · 5 sources · 4 versions

v4.06.9v3.15.3v3.05.0v2.05.0

EPSS trend

Probability

2.76%

Chance of exploitation in the next 30 days

Percentile

86%

Versus all other CVEs

30-day change

0.00 pp

From 2.76% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-425Direct Request ('Forced Browsing')The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

Affected systems

Redhat58 products

candlepin< 0:0.9.54.26-1.el6 | < 0:0.9.54.26-1.el7
candlepin-selinux< 0:0.9.54.26-1.el6 | < 0:0.9.54.26-1.el7
foreman< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-compute< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-debug< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat

foreman-ec2< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-gce< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-installer< 1:1.11.0.18-1.el6sat | < 1:1.11.0.18-1.el7sat
foreman-installer-katello< 0:3.0.0.101-1.el6sat | < 0:3.0.0.101-1.el7sat
foreman-libvirt< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-openstack< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-ovirt< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-postgresql< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-rackspace< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
foreman-vmware< 0:1.11.0.86-1.el6sat | < 0:1.11.0.86-1.el7sat
katello< 0:3.0.0-33.el6sat | < 0:3.0.0-33.el7sat
katello-capsule< 0:3.0.0-33.el6sat | < 0:3.0.0-33.el7sat
katello-common< 0:3.0.0-33.el6sat | < 0:3.0.0-33.el7sat
katello-debug< 0:3.0.0-33.el6sat | < 0:3.0.0-33.el7sat
katello-installer-base< 0:3.0.0.101-1.el6sat | < 0:3.0.0.101-1.el7sat
katello-service< 0:3.0.0-33.el6sat | < 0:3.0.0-33.el7sat
libqpid-dispatch< 0:0.4-27.el6sat | < 0:0.4-27.el7sat
pulp< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-admin-client< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-nodes-child< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-nodes-common< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-nodes-parent< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-puppet< 0:2.8.7.2-1.el6sat | < 0:2.8.7.2-1.el7sat
pulp-puppet-admin-extensions< 0:2.8.7.2-1.el6sat | < 0:2.8.7.2-1.el7sat
pulp-puppet-plugins< 0:2.8.7.2-1.el6sat | < 0:2.8.7.2-1.el7sat
pulp-puppet-tools< 0:2.8.7.2-1.el6sat | < 0:2.8.7.2-1.el7sat
pulp-selinux< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
pulp-server< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-agent-lib< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-bindings< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-client-lib< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-common< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-oid_validation< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-puppet-common< 0:2.8.7.2-1.el6sat | < 0:2.8.7.2-1.el7sat
python-pulp-repoauth< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-pulp-streamer< 0:2.8.7.18-1.el6sat | < 0:2.8.7.18-1.el7sat
python-qpid-proton< 0:0.9-21.el6 | < 0:0.9-21.el7
python-twisted-web< 0:12.1.0-5.el7_2 | < 0:8.2.0-5.el6_8
qpid-dispatch< 0:0.4-27.el6sat | < 0:0.4-27.el7sat
qpid-dispatch-debuginfo< 0:0.4-27.el6sat | < 0:0.4-27.el7sat
qpid-dispatch-router< 0:0.4-27.el6sat | < 0:0.4-27.el7sat
qpid-dispatch-tools< 0:0.4-27.el6sat | < 0:0.4-27.el7sat
qpid-proton< 0:0.9-21.el6 | < 0:0.9-21.el7
qpid-proton-c< 0:0.9-21.el6 | < 0:0.9-21.el7
qpid-proton-debuginfo< 0:0.9-21.el6 | < 0:0.9-21.el7
rubygem-smart_proxy_openscap< 0:0.5.3.9-2.el6sat | < 0:0.5.3.9-2.el7sat
satellite< 0:6.2.14-4.0.el6sat | < 0:6.2.14-4.0.el7sat
satellite-capsule< 0:6.2.14-4.0.el6sat | < 0:6.2.14-4.0.el7sat
satellite-cli< 0:6.2.14-4.0.el6sat | < 0:6.2.14-4.0.el7sat
satellite-debug-tools< 0:6.2.14-4.0.el6sat | < 0:6.2.14-4.0.el7sat
tfm-rubygem-foreman_theme_satellite< 0:0.1.47.2-1.el6sat | < 0:0.1.47.2-1.el7sat
tfm-rubygem-katello< 0:3.0.0.162-1.el6sat | < 0:3.0.0.162-1.el7sat
tfm-rubygem-katello_ostree< 0:3.0.0.162-1.el7sat

Show all 58

Suse3 products

python-Twisted&distro=SUSE Enterprise Storage 3< 15.2.1-8.1
python-Twisted&distro=SUSE Enterprise Storage 4< 15.2.1-8.1
python-Twisted&distro=SUSE Linux Enterprise Module for Web and Scripting 12< 15.2.1-8.1

Debian1 product

twisted< 16.4.0-1

Mageia1 product

python-twisted-web< 14.0.1-3.1.mga5

Opensuse1 product

python-Twisted&distro=openSUSE Tumbleweed< 16.4.1-1.2

PyPI1 product

twisted< 16.3.1

Twisted1 product

twisted< 16.3.1

Ubuntu1 product

twisted< 13.2.0-1ubuntu1.2 | < 16.0.0-1ubuntu0.2

8 vendors · 67 products

References

42 links

www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.htmlX Refsource CONFIRMThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2016/07/18/6X Refsource MISCMailing ListThird Party AdvisoryWEB
twistedmatrix.com/trac/ticket/8623X Refsource CONFIRMPatchVendor AdvisoryWEB
twistedmatrix.com/pipermail/twisted-web/2016-August/005268.htmlX Refsource CONFIRMMailing ListVendor AdvisoryWEB
advisories.mageia.org/MGASA-2016-0340.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=19496REPORT
rhn.redhat.com/errata/RHSA-2016-1978.htmlWEB
www.suse.com/support/update/announcement/2017/suse-su-20170114-1/Advisory
bugzilla.suse.com/989997REPORT
www.suse.com/security/cve/CVE-2016-1000111WEB

Show all 42 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities