CVE:CVE-2019-10160
CNNVD:CNNVD-201906-313
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python中存在信任管理问题漏洞。该漏洞源于网络系统或产品中缺乏有效的信任管理机制。攻击者可利用默认密码或者硬编码密码、硬编码证书等攻击受影响组件。以下产品及版本受到影响：Python 2.7版本，3.5版本，3.6版本，3.7版本，3.8.0a4版本至3.8.0b1版本。
solution:Upgrade python python to a higher version than 2.7.17,3.5.8,3.6.9,3.7.4,3.8.0:alpha4,3.8.0:beta1,and avoid the version [2.7.0,2.7.17),[3.5.0,3.5.8),[3.6.0,3.6.9),[3.7.0,3.7.4),3.8.0:alpha4,3.8.0:beta1; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp converged_systems_advisor_agent to a higher version than -