CVE:CVE-2019-9636
CNNVD:CNNVD-201903-311
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python 2.7.x版本版本至2.7.16版本和3.x版本至3.7.2版本中存在信任管理问题漏洞。攻击者可借助特制的URL利用该漏洞泄露信息（cookies或身份验证数据）。
solution:Upgrade python python to a higher version than 2.7.17,3.4.10,3.5.7,3.6.9,3.7.3,and avoid the version [2.7.0,2.7.17),[3.0.0,3.4.10),[3.5.0,3.5.7),[3.6.0,3.6.9),[3.7.0,3.7.3); Upgrade fedoraproject fedora to a higher version than 28,29,30,31,and avoid the version 28,29,30,31; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11; Upgrade redhat enterprise_linux to a higher version than 7.5,8.0,and avoid the version 7.5,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.5,8.1,8.2,8.4,8.6,and avoid the version 7.5,8.1,8.2,8.4,8.6; Upgrade redhat enterprise_linux_server to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,8.2,8.4,and avoid the version 7.4,8.2,8.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 5.6,and avoid the version 5.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,8.2,8.4,8.6,and avoid the version 7.4,8.2,8.4,8.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,and avoid the version 6.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade oracle sun_zfs_storage_appliance_kit to a higher version than 8.8.6,and avoid the version 8.8.6