Python-oauth2 (Urbanairship) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2014-05-20. Vendor: Urbanairship.

CVEs of Python-oauth2

• CVE-2013-4347 - CVSS 5.8 (medium), 2014-05-20: The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which…
• CVE-2013-4346 - CVSS 4.3 (medium), 2014-05-20: The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed…