[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fw03PdCEMnWJfNZEI84MG9-hOslEszFMNtnhIR7wpty4":3,"g5a-risk:CVE-2018-18074":201},{"success":4,"data":5,"meta":199},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":78,"references":79,"referencesCount":37,"weaknesses":123,"weaknessesCount":132,"isActivelyExploited":133,"cisaInfo":26,"otxData":26,"relatedBlogPosts":134,"seoMetadata":135,"configurations":160,"relatedVendorCves":197,"notableEvents":198},"CVE-2018-18074","What is CVE-2018-18074?","The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.","The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which ...","2018-10-09T17:29:01.897","2022-07-25T18:15:14.467",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.07443,[39,39,39,39,39,39,39],"High",[43,48,53,56,59,62,67,72,75],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"python","requests","*","cpe:2.3:a:python:requests:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":68,"product":69,"version":70,"criteria":71,"vulnerable":4},"redhat","enterprise_linux_desktop","7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":68,"product":73,"version":70,"criteria":74,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":68,"product":76,"version":70,"criteria":77,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",9,[80,86,91,95,102,106,109,112,116,119],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fdocs.python-requests.org\u002Fen\u002Fmaster\u002Fcommunity\u002Fupdates\u002F#release-and-version-history","Python-requests",[84,85],"Release Notes","Third Party Advisory",{"url":87,"source":88,"tags":89},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00024.html","Opensuse",[90,85],"Mailing List",{"url":92,"source":93,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2035","Red Hat",[85],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fbugs.debian.org\u002F910766","Debian",[99,100,101,85],"Exploit","Issue Tracking","Patch",{"url":103,"source":104,"tags":105},"https:\u002F\u002Fgithub.com\u002Frequests\u002Frequests\u002Fcommit\u002Fc45d7c49ea75133e52ab22a8e9e13173938e36ff","GitHub",[101,85],{"url":107,"source":104,"tags":108},"https:\u002F\u002Fgithub.com\u002Frequests\u002Frequests\u002Fissues\u002F4716",[99,101,85],{"url":110,"source":104,"tags":111},"https:\u002F\u002Fgithub.com\u002Frequests\u002Frequests\u002Fpull\u002F4718",[101,85],{"url":113,"source":114,"tags":115},"https:\u002F\u002Fusn.ubuntu.com\u002F3790-1\u002F","Ubuntu",[85],{"url":117,"source":114,"tags":118},"https:\u002F\u002Fusn.ubuntu.com\u002F3790-2\u002F",[85],{"url":120,"source":121,"tags":122},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html","Oracle",[],[124],{"id":125,"name":126,"description":127,"extendedDescription":128,"status":129,"abstraction":130,"structure":131},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":136,"metaDescription":137,"keywords":138,"canonicalUrl":139,"structuredData":140},"What is CVE-2018-18074? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-18074, a high severity cyber security vulnerability from 2018. The Requests package before 2.20.0 for Python sends an HTTP...","CVE-2018-18074, CVE-2018-18074 vulnerability, CVE-2018-18074 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, python security, canonical security, opensuse security, redhat security, requests vulnerability, ubuntu_linux vulnerability, leap vulnerability, enterprise_linux_desktop vulnerability","\u002Fwhat-is\u002Fcve-2018-18074",{"@context":141,"@type":142,"headline":136,"description":137,"datePublished":10,"dateModified":11,"author":143,"publisher":147,"about":151,"mainEntityOfPage":155,"articleSection":158,"keywords":159},"https:\u002F\u002Fschema.org","TechArticle",{"@type":144,"name":145,"url":146},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":144,"name":145,"url":146,"logo":148},{"@type":149,"url":150},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":152,"name":6,"description":153,"additionalType":154},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":156,"@id":157},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-18074","Cybersecurity","CVE-2018-18074, CVE-2018-18074 vulnerability, CVE-2018-18074 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[161,169,181,187],{"Operator":26,"Negate":26,"Nodes":162},[163],{"Operator":164,"Negate":26,"CPEMatch":165},"OR",[166],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":168,"VersionEndIncluding":26},"7CFBA4E8-EE3D-413C-8175-43F7E42960CA","2.20.0",{"Operator":26,"Negate":26,"Nodes":170},[171],{"Operator":164,"Negate":26,"CPEMatch":172},[173,175,177,179],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":174,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"815D70A8-47D3-459C-A32C-9FEACA0659D1",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":176,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":178,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":180,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Operator":26,"Negate":26,"Nodes":182},[183],{"Operator":164,"Negate":26,"CPEMatch":184},[185],{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Operator":26,"Negate":26,"Nodes":188},[189],{"Operator":164,"Negate":26,"CPEMatch":190},[191,193,195],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":194,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":196,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[],{"lastModified":11,"cacheTime":200,"version":32},1792243520969,{"score":202,"band":203,"action":204,"scoredAt":205},48,"Medium","Plan remediation","2026-10-16T06:44:56.443713+00:00"]