CVE-2018-18074: canonical ubuntu_linux Insufficiently Protected Credentials

CVSS: 7.5v3.1HighModified

AliasesMGASA-2018-0475SUSE-SU-2019:1487-1SUSE-SU-2019:2027-1+11 more

Published 09-10-2018Last modified 05-08-2024

Vulnerability summary

CVE-2018-18074 is a high (CVSS 7.5) Insufficiently Protected Credentials vulnerability in canonical ubuntu_linux. EPSS estimates a 7.44% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

41/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (NVD)

EPSS score

7.44%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2github, reference

Advisory lineage

Upstream 0 · Downstream 8 · Related 2

OPENSUSE-SU-2026:12038-1 RHSA-2020:0850 RHSA-2020:0851 RHSA-2020:1605 RHSA-2020:1916 RHSA-2020:2068+2 more

Timeline

09-10-2018
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

CVSS metrics

6 scores · 5 sources · 3 versions

v3.17.5v3.02.6v2.05.0

EPSS trend

Probability

7.44%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.44% on 18-09-2026

18-09-202618-10-2026

EPSS score

7.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

githubUnverified
Requests
Maturity: poc
referenceUnverified
Exploit Reference (bugs.debian.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected systems

Suse111 products

python-asn1crypto&distro=HPE Helion OpenStack 8< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Enterprise Storage 5< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise High Availability Extension 12 SP1< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 0.24.0-2.5.1

python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP4< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server 12 SP5< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE OpenStack Cloud 7< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE OpenStack Cloud 8< 0.24.0-2.5.1
python-asn1crypto&distro=SUSE OpenStack Cloud Crowbar 8< 0.24.0-2.5.1
python-aws-sam-translator&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.11.0-2.3.1
python-boto3&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.9.213-14.9.1
python-botocore&distro=HPE Helion OpenStack 8< 1.12.213-28.12.1
python-botocore&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.12.213-28.12.1
python-botocore&distro=SUSE OpenStack Cloud 8< 1.12.213-28.12.1
python-botocore&distro=SUSE OpenStack Cloud Crowbar 8< 1.12.213-28.12.1
python-cfn-lint&distro=SUSE Linux Enterprise Module for Public Cloud 12< 0.21.4-2.3.1
python-docutils&distro=SUSE Linux Enterprise Module for Public Cloud 12< 0.15.2-3.4.2
python-functools32&distro=SUSE Linux Enterprise Module for Public Cloud 12< 3.2.3.2-2.6.1
python-jsonpatch&distro=HPE Helion OpenStack 8< 1.1-10.4.1
python-jsonpatch&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.1-10.4.1
python-jsonpatch&distro=SUSE OpenStack Cloud 7< 1.1-10.4.1
python-jsonpatch&distro=SUSE OpenStack Cloud 8< 1.1-10.4.1
python-jsonpatch&distro=SUSE OpenStack Cloud Crowbar 8< 1.1-10.4.1
python-jsonpointer&distro=HPE Helion OpenStack 8< 1.0-10.3.1
python-jsonpointer&distro=SUSE Linux Enterprise Module for Public Cloud 12< 1.0-10.3.1
python-jsonpointer&distro=SUSE OpenStack Cloud 7< 1.0-10.3.1
python-jsonpointer&distro=SUSE OpenStack Cloud 8< 1.0-10.3.1
python-jsonpointer&distro=SUSE OpenStack Cloud Crowbar 8< 1.0-10.3.1
python-jsonschema&distro=SUSE Linux Enterprise Module for Public Cloud 12< 2.6.0-5.3.1
python-packaging&distro=HPE Helion OpenStack 8< 17.1-2.5.1
python-packaging&distro=SUSE Enterprise Storage 5< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise High Availability Extension 12 SP1< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP4< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server 12 SP5< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 17.1-2.5.1
python-packaging&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 17.1-2.5.1
python-packaging&distro=SUSE OpenStack Cloud 7< 17.1-2.5.1
python-packaging&distro=SUSE OpenStack Cloud 8< 17.1-2.5.1
python-packaging&distro=SUSE OpenStack Cloud Crowbar 8< 17.1-2.5.1
python-pyparsing&distro=SUSE Linux Enterprise High Availability Extension 12 SP1< 2.2.0-7.6.1
python-pyparsing&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 2.2.0-7.6.1
python-pyparsing&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 2.2.0-7.6.1
python-pyparsing&distro=SUSE Linux Enterprise Server 12 SP2-LTSS< 2.2.0-7.6.1
python-pyparsing&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 2.2.0-7.6.1
python-pyparsing&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2< 2.2.0-7.6.1
python-pyparsing&distro=SUSE OpenStack Cloud 7< 2.2.0-7.6.1
python-PyYAML&distro=HPE Helion OpenStack 8< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Enterprise Storage 5< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise High Availability Extension 12 SP1< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise High Availability Extension 12 SP2< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Module for Containers 12< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Module for Public Cloud 12< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Point of Sale 12 SP2< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server 12 SP4< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server 12 SP5< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Manager Client Tools 12< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Manager Proxy 3.2< 5.1.2-26.9.4
python-PyYAML&distro=SUSE Manager Server 3.2< 5.1.2-26.9.4
python-PyYAML&distro=SUSE OpenStack Cloud 7< 5.1.2-26.9.4
python-PyYAML&distro=SUSE OpenStack Cloud 8< 5.1.2-26.9.4
python-PyYAML&distro=SUSE OpenStack Cloud Crowbar 8< 5.1.2-26.9.4
python-requests&distro=HPE Helion OpenStack 8< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise High Availability Extension 12 SP3< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise High Availability Extension 12 SP4< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise High Availability Extension 12 SP5< 2.20.1-8.7.7
python-requests&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 2.18.4-150000.3.3.1
python-requests&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 2.18.4-150000.3.3.1
python-requests&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 2.20.1-6.3.2
python-requests&distro=SUSE Linux Enterprise Module for Public Cloud 12< 2.20.1-8.7.7
python-requests&distro=SUSE Linux Enterprise Module for Python 2 15 SP1< 2.20.1-6.3.2
python-requests&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server 12 SP5< 2.20.1-8.7.7
python-requests&distro=SUSE Linux Enterprise Server 15-LTSS< 2.18.4-150000.3.3.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 2.11.1-6.31.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 2.20.1-8.7.7
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 15< 2.18.4-150000.3.3.1
python-requests&distro=SUSE Manager Client Tools 12< 2.11.1-6.31.1
python-requests&distro=SUSE OpenStack Cloud 7< 2.11.1-6.31.1
python-requests&distro=SUSE OpenStack Cloud 8< 2.11.1-6.31.1
python-requests&distro=SUSE OpenStack Cloud 9< 2.20.1-4.3.1 | < 2.11.1-6.31.1
python-requests&distro=SUSE OpenStack Cloud Crowbar 8< 2.11.1-6.31.1
python-requests&distro=SUSE OpenStack Cloud Crowbar 9< 2.20.1-4.3.1 | < 2.11.1-6.31.1
python-s3transfer&distro=SUSE Linux Enterprise Module for Public Cloud 12< 0.2.1-8.3.1

Show all 111

Redhat4 products

Opensuse3 products

leapEOL15.1
python-requests-test&distro=openSUSE Leap 15.1< 2.20.1-lp151.2.3.1
python-requests&distro=openSUSE Leap 15.1< 2.20.1-lp151.2.3.1

Ubuntu2 products

python-pipAll versions (No fix recorded) | < 9.0.1-2.3~ubuntu1.18.04.2
requests< 2.2.1-1ubuntu0.4 | < 2.9.1-3ubuntu0.1 | < 2.18.4-2ubuntu0.1

Canonical1 product

ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 18.10

Debian1 product

requests< 2.20.0-1

Mageia1 product

python-requests< 2.11.1-2.1.mga6

PyPI1 product

requests< c45d7c49ea75133e52ab22a8e9e13173938e36ff | < 2.20.0

Python1 product

requests< 2.20.0

9 vendors · 125 products

References

39 links

usn.ubuntu.com/3790-1/Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
usn.ubuntu.com/3790-2/Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party AdvisoryWEB
access.redhat.com/errata/RHSA-2019:2035Vendor AdvisoryX Refsource REDHATThird Party AdvisoryWEBAdvisory
www.oracle.com/security-alerts/cpujul2022.htmlX Refsource MISCWEB
docs.python-requests.org/en/master/community/updates/X Refsource CONFIRMRelease NotesThird Party AdvisoryWEB
bugs.debian.org/910766X Refsource MISCExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/requests/requests/commit/c45d7c49ea75133e52ab22a8e9e13173938e36ffX Refsource MISCPatchThird Party AdvisoryWEBFIXREPORT
github.com/requests/requests/issues/4716X Refsource MISCExploitPatchThird Party AdvisoryWEBREPORT
github.com/requests/requests/pull/4718X Refsource MISCPatchThird Party AdvisoryWEBREPORT

Show all 39 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities