[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJPagOdQ2pxE_99d5NkQYcLMJnDhqojQpvRRQSgtbj0g":3,"g5a-risk:CVE-2016-9015":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":50,"references":51,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":15,"otxData":15,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":116,"notableEvents":117},"CVE-2016-9015","What is CVE-2016-9015?","Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates. This places users of the library with those configurations at risk of man-in-the-middle and information leakage attacks. This vulnerability affects users using versions 1.17 and 1.18 of the urllib3 library, who are using the optional PyOpenSSL support for TLS instead of the regular standard library TLS backend, and who are using OpenSSL 1.1.0 via PyOpenSSL. This is an extremely uncommon configuration, so the security impact of this vulnerability is low.","Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TL...","2017-01-11T16:59:00.347","2025-04-20T01:37:25.86",3.7,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","LOW",2.2,1.4,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",2.6,4.9,2.9,0.00754,[38,38,38,38,38,38,38],"Low",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"python","urllib3","1.17","cpe:2.3:a:python:urllib3:1.17:*:*:*:*:*:*:*",{"vendor":43,"product":44,"version":48,"criteria":49,"vulnerable":4},"1.18","cpe:2.3:a:python:urllib3:1.18:*:*:*:*:*:*:*",2,[52,58,64,66],{"url":53,"source":54,"tags":55},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F10\u002F27\u002F6","Openwall",[56,57],"Mailing List","Mitigation",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F93941","Securityfocus",[62,63],"Third Party Advisory","VDB Entry",{"url":53,"source":54,"tags":65},[56,57],{"url":59,"source":60,"tags":67},[62,63],4,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2016-9015? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-9015, a low severity cyber security vulnerability from 2017. Versions 1.17 and 1.18 of the Python urllib3 library suffer f...","CVE-2016-9015, CVE-2016-9015 vulnerability, CVE-2016-9015 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, python security, urllib3 vulnerability","\u002Fwhat-is\u002Fcve-2016-9015",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-9015","Cybersecurity","CVE-2016-9015, CVE-2016-9015 vulnerability, CVE-2016-9015 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":15,"Negate":15,"Nodes":108},[109],{"Operator":110,"Negate":15,"CPEMatch":111},"OR",[112,114],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":113,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0D13162D-373A-4872-B2DC-F7088DB878ED",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FF034AE6-0FE0-45DF-9DC6-E536337CF9D4",[],[],{"lastModified":11,"cacheTime":119,"version":32},1792264681275,{"score":121,"band":122,"action":123,"scoredAt":124},15,"Info","Track","2026-10-17T08:26:04.415717+00:00"]