WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. `urlparse` however treats a `//` at the start of a string as a URI without a scheme, and then treats the next part as the hostname. `urljoin` will then use that hostname from the second part as the hostname replacing the original one from the request. This vulnerability is patched in WebOb version 1.8.8.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9989 advisory.

    WebOb provides wrappers around the WSGI request environment, and an object     to help create WSGI responses. The objects map much of the specified     behavior of HTTP, including header parsing and accessors for other standard     parts of the environment.

    Security Fix(es):

    * WebOb's location header normalization during redirect leads to open     redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:9983 advisory.

    WebOb provides wrappers around the WSGI request environment, and an object     to help create WSGI responses. The objects map much of the specified     behavior of HTTP, including header parsing and accessors for other standard     parts of the environment.

    Security Fix(es):

    * WebOb's location header normalization during redirect leads to open     redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b4c4fd0879 advisory.

    Automatic update for python-webob-1.8.8-1.fc41.

    ##### **Changelog**

    ```
    * Thu Aug 15 2024 Jn ONDREJ (SAL) <ondrejj(at)salstar.sk> - 1.8.8-1
    - Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065
    - pypi_source constructed manually according to project/name case inconsistency
    - only require legacy-cgi on on systems where it's present
    - remove python3.9 patch (applied upstream)

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7941 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.52. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:7939     Security Fix(es):

    * openstack-ironic: Specially crafted image may allow authenticated users     to gain access to potentially sensitive data (CVE-2024-44082)
    * containers/image: digest type does not guarantee valid type     (CVE-2024-3727)
    * webob: WebOb's location header normalization during redirect leads to     open redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.13/updating/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of python-webob installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42353 advisory.

  - WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to     include the request hostname, it does so by parsing the URL that the user is to be redirected to with     Python's urlparse, and joining it to the base URL. `urlparse` however treats a `//` at the start of a     string as a URI without a scheme, and then treats the next part as the hostname. `urljoin` will then use     that hostname from the second part as the hostname replacing the original one from the request. This     vulnerability is patched in WebOb version 1.8.8. (CVE-2024-42353)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7187 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.14.38. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:7184

    Security Fix(es):

    * containers/image: digest type does not guarantee valid type     (CVE-2024-3727)
    * webob: WebOb's location header normalization during redirect leads to     open redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.14 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.14/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7182 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.15.35. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:7179

    Security Fix(es):

    * containers/image: digest type does not guarantee valid type     (CVE-2024-3727)
    * webob: WebOb's location header normalization during redirect leads to     open redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.15 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.15/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6827 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution     designed for on-premise or private cloud deployments.

    This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.16.14. See the     following advisory for the container images for this release:

    https://access.redhat.com/errata/RHSA-2024:6824

    Security Fix(es):

    * webob: WebOb's location header normalization during redirect leads to     open redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images     when they are available in the appropriate release channel. To check for available updates, use the     OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at     https://docs.openshift.com/container-platform/4.16/updating/updating_a_cluster/updating-cluster-cli.html

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6775 advisory.

    WebOb provides wrappers around the WSGI request environment, and an object     to help create WSGI responses. The objects map much of the specified     behavior of HTTP, including header parsing and accessors for other standard     parts of the environment.

    Security Fix(es):

    * WebOb's location header normalization during redirect leads to open     redirect (CVE-2024-42353)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3116-1 advisory.

    - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header (bsc#1229221)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-6984-1 advisory.

    It was discovered that WebOb incorrectly handled certain URLs. An attacker could possibly use this issue     to control a redirect or forward to another URL.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a6817a2e80 advisory.

    Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065

    ----

    Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-40ff0d8644 advisory.

    Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065

    ----

    Update to upstream. Fix open redirect issue in 1.8-branch rhbz#2305065

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2969-1 advisory.

    - CVE-2024-42353: Fixed open redirect via WebOb's Response object in Location header (bsc#1229221)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211793	RHEL 8 : RHOSP 17.1.4 (python-webob) (RHSA-2024:9989)	Nessus	Red Hat Local Security Checks	medium
211790	RHEL 9 : RHOSP 17.1.4 (python-webob) (RHSA-2024:9983)	Nessus	Red Hat Local Security Checks	medium
211229	Fedora 41 : python-webob (2024-b4c4fd0879)	Nessus	Fedora Local Security Checks	medium
209187	RHEL 8 / 9 : OpenShift Container Platform 4.13.z (RHSA-2024:7941)	Nessus	Red Hat Local Security Checks	medium
208806	CBL Mariner 2.0 Security Update: python-webob (CVE-2024-42353)	Nessus	MarinerOS Local Security Checks	medium
208072	RHEL 8 / 9 : OpenShift Container Platform 4.14.38 (RHSA-2024:7187)	Nessus	Red Hat Local Security Checks	medium
208030	RHEL 8 / 9 : OpenShift Container Platform 4.15.35 (RHSA-2024:7182)	Nessus	Red Hat Local Security Checks	medium
207705	RHEL 9 : OpenShift Container Platform 4.16.14 (RHSA-2024:6827)	Nessus	Red Hat Local Security Checks	medium
207461	RHEL 9 : Red Hat OpenStack Platform 18.0 (python-webob) (RHSA-2024:6775)	Nessus	Red Hat Local Security Checks	medium
206567	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-WebOb (SUSE-SU-2024:3116-1)	Nessus	SuSE Local Security Checks	medium
206421	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : WebOb vulnerability (USN-6984-1)	Nessus	Ubuntu Local Security Checks	medium
206202	Fedora 40 : python-webob (2024-a6817a2e80)	Nessus	Fedora Local Security Checks	medium
206200	Fedora 39 : python-webob (2024-40ff0d8644)	Nessus	Fedora Local Security Checks	medium
205861	SUSE SLES12 Security Update : python-WebOb (SUSE-SU-2024:2969-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-42353

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium