Field Assessment
AI analysis pending.
CVE
CVE-2013-1895
Severity
HIGH
CVSS
7.5
EPSS
2.83%
Original Filing — NVD Description
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten.