CVE-2013-4346

SimpleGeo python-oauth2 does not check the nonce allowing replay attacks

4.3 MediumFix available

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

Exploit likelihood

2.43%Up 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

Record: CVE-2013-4346
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-310
Updated: 2026-11-02

CVE List No score

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

Record: CVE-2013-4346
Updated: 2026-11-02

EUVDEUVD-2014-0038 No score

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

Record: EUVD-2014-0038
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4433-4cxq-vv73 8.7

SimpleGeo python-oauth2 does not check the nonce allowing replay attacks

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL. The vulnerability does not appear to be patched according to the following discussion.

Record: GHSA-4433-4cxq-vv73
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-347
Updated: 2026-11-02

OSVGHSA-4433-4cxq-vv73 8.7

SimpleGeo python-oauth2 does not check the nonce allowing replay attacks

Record: GHSA-4433-4cxq-vv73
CVSS 4.0: 8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-347
Updated: 2026-11-02

OSVPYSEC-2014-85 No score

The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.

Record: PYSEC-2014-85
Updated: 2026-11-02

Affected products

urbanairship python-oauth2

Affected packages

Affected packages
Package	Affected	Fixed
`oauth2` PyPI	through 1.9rc1	None known
`oauth2` PyPI	through 1.9rc1, plus listed versions 1.0.01.0.41.0.51.0.61.0.7 Show 24 moreShow less 1.0.81.0.91.1.01.1.11.1.31.2.01.5.1501.5.1531.5.1551.5.1581.5.1591.5.1601.5.1611.5.1621.5.1631.5.1641.5.1651.5.1661.5.1671.5.1681.5.1691.5.1701.5.2101.5.211	None known
`oauth2` PyPI	before 1.9rc1, plus listed versions 1.0.01.0.41.0.51.0.61.0.7 Show 24 moreShow less 1.0.81.0.91.1.01.1.11.1.31.2.01.5.1501.5.1531.5.1551.5.1581.5.1591.5.1601.5.1611.5.1621.5.1631.5.1641.5.1651.5.1661.5.1671.5.1681.5.1691.5.1701.5.2101.5.211	1.9rc1
`capsule-installer` Red Hat:satellite_capsule:6.1::el7	before 0:2.3.17-1.el7sat	0:2.3.17-1.el7sat
`createrepo_c` Red Hat:satellite_capsule:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`createrepo_c-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`createrepo_c-libs` Red Hat:satellite_capsule:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`facter` Red Hat:satellite_capsule:6.1::el7	before 1:1.7.6-2.1.el7sat	1:1.7.6-2.1.el7sat
`facter-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 1:1.7.6-2.1.el7sat	1:1.7.6-2.1.el7sat
`foreman` Red Hat:satellite_capsule:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`foreman-debug` Red Hat:satellite_capsule:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-discovery-image` Red Hat:satellite_capsule:6.1::el7	before 1:2.1.0-36.el7sat	1:2.1.0-36.el7sat
`foreman-proxy` Red Hat:satellite_capsule:6.1::el7	before 0:1.7.2.5-1.el7sat	0:1.7.2.5-1.el7sat
`foreman-selinux` Red Hat:satellite_capsule:6.1::el7	before 0:1.7.2.13-1.el7sat	0:1.7.2.13-1.el7sat
`gofer` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.2-2.el7sat	0:2.6.2-2.el7sat
`gperftools` Red Hat:satellite_capsule:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`gperftools-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`gperftools-libs` Red Hat:satellite_capsule:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`hfsplus-tools` Red Hat:satellite_capsule:6.1::el7	before 0:332.14-12.el7	0:332.14-12.el7
`hfsplus-tools-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:332.14-12.el7	0:332.14-12.el7
`hiera` Red Hat:satellite_capsule:6.1::el7	before 0:1.3.1-2.el7	0:1.3.1-2.el7
`katello` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-agent` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.5-1.el7sat	0:2.2.5-1.el7sat
`katello-certs-tools` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.1-1.el7sat	0:2.2.1-1.el7sat
`katello-debug` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-installer-base` Red Hat:satellite_capsule:6.1::el7	before 0:2.3.17-1.el7sat	0:2.3.17-1.el7sat
`katello-service` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`libdb-cxx` Red Hat:satellite_capsule:6.1::el7	before 0:5.3.21-17.el7_0.1	0:5.3.21-17.el7_0.1
`libdb-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:5.3.21-17.el7_0.1	0:5.3.21-17.el7_0.1
`libqpid-dispatch` Red Hat:satellite_capsule:6.1::el7	before 0:0.4-7.el7	0:0.4-7.el7
`livecd-tools` Red Hat:satellite_capsule:6.1::el7	before 1:20.4-1.5.el7sat	1:20.4-1.5.el7sat
`mod_passenger` Red Hat:satellite_capsule:6.1::el7	before 0:4.0.18-19.el7sat	0:4.0.18-19.el7sat
`mongodb` Red Hat:satellite_capsule:6.1::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`mongodb-server` Red Hat:satellite_capsule:6.1::el7	before 0:2.4.9-3.el7sat	0:2.4.9-3.el7sat
`pulp` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-admin-client` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-docker` Red Hat:satellite_capsule:6.1::el7	before 0:0.2.5-1.el7sat	0:0.2.5-1.el7sat
`pulp-docker-plugins` Red Hat:satellite_capsule:6.1::el7	before 0:0.2.5-1.el7sat	0:0.2.5-1.el7sat
`pulp-katello` Red Hat:satellite_capsule:6.1::el7	before 0:0.5-1.el7sat	0:0.5-1.el7sat
`pulp-nodes-child` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-nodes-common` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-nodes-parent` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-puppet` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-puppet-admin-extensions` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-puppet-plugins` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-rpm` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-rpm-admin-extensions` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-rpm-handlers` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-rpm-plugins` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-selinux` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`pulp-server` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`puppet` Red Hat:satellite_capsule:6.1::el7	before 0:3.6.2-4.el7sat	0:3.6.2-4.el7sat
`puppet-foreman_scap_client` Red Hat:satellite_capsule:6.1::el7	before 0:0.3.3-9.el7sat	0:0.3.3-9.el7sat
`puppet-server` Red Hat:satellite_capsule:6.1::el7	before 0:3.6.2-4.el7sat	0:3.6.2-4.el7sat
`puppetlabs-stdlib` Red Hat:satellite_capsule:6.1::el7	before 0:4.2.1-1.20140510git08b00d9.el7sat	0:4.2.1-1.20140510git08b00d9.el7sat
`python-BeautifulSoup` Red Hat:satellite_capsule:6.1::el7	before 1:3.0.8.1-1.el7sat	1:3.0.8.1-1.el7sat
`python-amqp` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.6-1.el7sat	0:1.4.6-1.el7sat
`python-anyjson` Red Hat:satellite_capsule:6.1::el7	before 0:0.3.3-5.el7sat	0:0.3.3-5.el7sat
`python-billiard` Red Hat:satellite_capsule:6.1::el7	before 1:3.3.0.17-1.el7sat	1:3.3.0.17-1.el7sat
`python-billiard-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 1:3.3.0.17-1.el7sat	1:3.3.0.17-1.el7sat
`python-blinker` Red Hat:satellite_capsule:6.1::el7	before 0:1.3-2.el7sat	0:1.3-2.el7sat
`python-bson` Red Hat:satellite_capsule:6.1::el7	before 0:2.5.2-3.el7sat	0:2.5.2-3.el7sat
`python-celery` Red Hat:satellite_capsule:6.1::el7	before 0:3.1.11-1.el7sat	0:3.1.11-1.el7sat
`python-cherrypy` Red Hat:satellite_capsule:6.1::el7	before 0:3.2.2-3.el7sat	0:3.2.2-3.el7sat
`python-crane` Red Hat:satellite_capsule:6.1::el7	before 0:0.2.2-1.el7	0:0.2.2-1.el7
`python-flask` Red Hat:satellite_capsule:6.1::el7	before 1:0.10.1-4.el7sat	1:0.10.1-4.el7sat
`python-gofer` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.2-2.el7sat	0:2.6.2-2.el7sat
`python-gofer-proton` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.2-2.el7sat	0:2.6.2-2.el7sat
`python-gofer-qpid` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.2-2.el7sat	0:2.6.2-2.el7sat
`python-httplib2` Red Hat:satellite_capsule:6.1::el7	before 0:0.6.0-6.el7sat	0:0.6.0-6.el7sat
`python-imgcreate` Red Hat:satellite_capsule:6.1::el7	before 1:20.4-1.5.el7sat	1:20.4-1.5.el7sat
`python-isodate` Red Hat:satellite_capsule:6.1::el7	before 0:0.5.0-4.pulp.el7sat	0:0.5.0-4.pulp.el7sat
`python-itsdangerous` Red Hat:satellite_capsule:6.1::el7	before 0:0.23-1.el7sat	0:0.23-1.el7sat
`python-jinja2` Red Hat:satellite_capsule:6.1::el7	before 0:2.7.2-2.el7sat	0:2.7.2-2.el7sat
`python-kombu` Red Hat:satellite_capsule:6.1::el7	before 1:3.0.24-10.pulp.el7sat	1:3.0.24-10.pulp.el7sat
`python-mongoengine` Red Hat:satellite_capsule:6.1::el7	before 0:0.7.10-2.el7sat	0:0.7.10-2.el7sat
`python-nectar` Red Hat:satellite_capsule:6.1::el7	before 0:1.3.1-2.el7sat	0:1.3.1-2.el7sat
`python-oauth2` Red Hat:satellite_capsule:6.1::el7	before 0:1.5.211-8.el7sat	0:1.5.211-8.el7sat
`python-okaara` Red Hat:satellite_capsule:6.1::el7	before 0:1.0.32-1.el7sat	0:1.0.32-1.el7sat
`python-pulp-agent-lib` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pulp-bindings` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pulp-client-lib` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pulp-common` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pulp-docker-common` Red Hat:satellite_capsule:6.1::el7	before 0:0.2.5-1.el7sat	0:0.2.5-1.el7sat
`python-pulp-puppet-common` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pulp-rpm-common` Red Hat:satellite_capsule:6.1::el7	before 0:2.6.0.15-1.el7sat	0:2.6.0.15-1.el7sat
`python-pymongo` Red Hat:satellite_capsule:6.1::el7	before 0:2.5.2-3.el7sat	0:2.5.2-3.el7sat
`python-pymongo-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:2.5.2-3.el7sat	0:2.5.2-3.el7sat
`python-pymongo-gridfs` Red Hat:satellite_capsule:6.1::el7	before 0:2.5.2-3.el7sat	0:2.5.2-3.el7sat
`python-qpid` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-6.el7	0:0.30-6.el7
`python-qpid-proton` Red Hat:satellite_capsule:6.1::el7	before 0:0.9-4.el7	0:0.9-4.el7
`python-qpid-qmf` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-5.el7	0:0.30-5.el7
`python-requests` Red Hat:satellite_capsule:6.1::el7	before 0:2.4.3-1.el7sat	0:2.4.3-1.el7sat
`python-saslwrapper` Red Hat:satellite_capsule:6.1::el7	before 0:0.22-5.el7sat	0:0.22-5.el7sat
`python-semantic-version` Red Hat:satellite_capsule:6.1::el7	before 0:2.2.0-3.el7sat	0:2.2.0-3.el7sat
`python-simplejson` Red Hat:satellite_capsule:6.1::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-simplejson-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:3.2.0-1.el7sat	0:3.2.0-1.el7sat
`python-webpy` Red Hat:satellite_capsule:6.1::el7	before 0:0.37-3.el7sat	0:0.37-3.el7sat
`python-werkzeug` Red Hat:satellite_capsule:6.1::el7	before 0:0.9.1-1.el7sat	0:0.9.1-1.el7sat
`qpid-cpp` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-9.el7	0:0.30-9.el7
`qpid-cpp-client` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-9.el7	0:0.30-9.el7
`qpid-cpp-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-9.el7	0:0.30-9.el7
`qpid-cpp-server` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-9.el7	0:0.30-9.el7
`qpid-cpp-server-linearstore` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-9.el7	0:0.30-9.el7
`qpid-dispatch` Red Hat:satellite_capsule:6.1::el7	before 0:0.4-7.el7	0:0.4-7.el7
`qpid-dispatch-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.4-7.el7	0:0.4-7.el7
`qpid-dispatch-router` Red Hat:satellite_capsule:6.1::el7	before 0:0.4-7.el7	0:0.4-7.el7
`qpid-proton` Red Hat:satellite_capsule:6.1::el7	before 0:0.9-4.el7	0:0.9-4.el7
`qpid-proton-c` Red Hat:satellite_capsule:6.1::el7	before 0:0.9-4.el7	0:0.9-4.el7
`qpid-proton-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.9-4.el7	0:0.9-4.el7
`qpid-qmf` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-5.el7	0:0.30-5.el7
`qpid-qmf-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-5.el7	0:0.30-5.el7
`qpid-tools` Red Hat:satellite_capsule:6.1::el7	before 0:0.30-4.el7	0:0.30-4.el7
`ruby-augeas` Red Hat:satellite_capsule:6.1::el7	before 0:0.5.0-1.el7	0:0.5.0-1.el7
`ruby-augeas-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.5.0-1.el7	0:0.5.0-1.el7
`ruby-rgen` Red Hat:satellite_capsule:6.1::el7	before 0:0.6.5-2.el7sat	0:0.6.5-2.el7sat
`ruby-shadow` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.1-21.el7	0:1.4.1-21.el7
`ruby-shadow-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.1-21.el7	0:1.4.1-21.el7
`rubygem-ansi` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.3-3.el7sat	0:1.4.3-3.el7sat
`rubygem-apipie-bindings` Red Hat:satellite_capsule:6.1::el7	before 0:0.0.11-1.el7	0:0.0.11-1.el7
`rubygem-awesome_print` Red Hat:satellite_capsule:6.1::el7	before 0:1.0.2-12.el7sat	0:1.0.2-12.el7sat
`rubygem-bundler_ext` Red Hat:satellite_capsule:6.1::el7	before 0:0.3.0-7.el7sat	0:0.3.0-7.el7sat
`rubygem-clamp` Red Hat:satellite_capsule:6.1::el7	before 0:0.6.2-2.el7sat	0:0.6.2-2.el7sat
`rubygem-ffi` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.0-3.el7sat	0:1.4.0-3.el7sat
`rubygem-ffi-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:1.4.0-3.el7sat	0:1.4.0-3.el7sat
`rubygem-gssapi` Red Hat:satellite_capsule:6.1::el7	before 0:1.1.2-4.el7sat	0:1.1.2-4.el7sat
`rubygem-hammer_cli_foreman_docker` Red Hat:satellite_capsule:6.1::el7	before 0:0.0.3.9-1.el7sat	0:0.0.3.9-1.el7sat
`rubygem-hammer_cli_foreman_docker-doc` Red Hat:satellite_capsule:6.1::el7	before 0:0.0.3.9-1.el7sat	0:0.0.3.9-1.el7sat
`rubygem-hashie` Red Hat:satellite_capsule:6.1::el7	before 0:2.0.5-2.el7sat	0:2.0.5-2.el7sat
`rubygem-highline` Red Hat:satellite_capsule:6.1::el7	before 0:1.6.21-1.el7sat	0:1.6.21-1.el7sat
`rubygem-kafo` Red Hat:satellite_capsule:6.1::el7	before 0:0.6.5.9-1.el7sat	0:0.6.5.9-1.el7sat
`rubygem-kafo_parsers` Red Hat:satellite_capsule:6.1::el7	before 0:0.0.4.4-1.el7sat	0:0.0.4.4-1.el7sat
`rubygem-little-plugger` Red Hat:satellite_capsule:6.1::el7	before 0:1.1.3-17.el7sat	0:1.1.3-17.el7sat
`rubygem-logging` Red Hat:satellite_capsule:6.1::el7	before 0:1.8.1-26.el7sat	0:1.8.1-26.el7sat
`rubygem-mime-types` Red Hat:satellite_capsule:6.1::el7	before 0:1.19-7.el7sat	0:1.19-7.el7sat
`rubygem-multi_json` Red Hat:satellite_capsule:6.1::el7	before 0:1.8.2-4.el7sat	0:1.8.2-4.el7sat
`rubygem-multi_json-doc` Red Hat:satellite_capsule:6.1::el7	before 0:1.8.2-4.el7sat	0:1.8.2-4.el7sat
`rubygem-oauth` Red Hat:satellite_capsule:6.1::el7	before 0:0.4.7-8.el7sat	0:0.4.7-8.el7sat
`rubygem-passenger` Red Hat:satellite_capsule:6.1::el7	before 0:4.0.18-19.el7sat	0:4.0.18-19.el7sat
`rubygem-passenger-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:4.0.18-19.el7sat	0:4.0.18-19.el7sat
`rubygem-passenger-native` Red Hat:satellite_capsule:6.1::el7	before 0:4.0.18-19.el7sat	0:4.0.18-19.el7sat
`rubygem-passenger-native-libs` Red Hat:satellite_capsule:6.1::el7	before 0:4.0.18-19.el7sat	0:4.0.18-19.el7sat
`rubygem-powerbar` Red Hat:satellite_capsule:6.1::el7	before 0:1.0.11-8.el7sat	0:1.0.11-8.el7sat
`rubygem-rack` Red Hat:satellite_capsule:6.1::el7	before 1:1.4.1-13.el7sat	1:1.4.1-13.el7sat
`rubygem-rack-protection` Red Hat:satellite_capsule:6.1::el7	before 0:1.5.0-7.el7sat	0:1.5.0-7.el7sat
`rubygem-rake` Red Hat:satellite_capsule:6.1::el7	before 0:0.9.2.2-41.el7sat	0:0.9.2.2-41.el7sat
`rubygem-rest-client` Red Hat:satellite_capsule:6.1::el7	before 0:1.6.7-1.el7sat	0:1.6.7-1.el7sat
`rubygem-rkerberos` Red Hat:satellite_capsule:6.1::el7	before 0:0.1.2-3.el7sat	0:0.1.2-3.el7sat
`rubygem-rkerberos-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.1.2-3.el7sat	0:0.1.2-3.el7sat
`rubygem-rubyipmi` Red Hat:satellite_capsule:6.1::el7	before 0:0.10.0-1.el7sat	0:0.10.0-1.el7sat
`rubygem-satyr` Red Hat:satellite_capsule:6.1::el7	before 0:0.2-1.el7	0:0.2-1.el7
`rubygem-sinatra` Red Hat:satellite_capsule:6.1::el7	before 1:1.3.6-27.el7sat	1:1.3.6-27.el7sat
`rubygem-smart_proxy_abrt` Red Hat:satellite_capsule:6.1::el7	before 0:0.0.6-5.el7sat	0:0.0.6-5.el7sat
`rubygem-smart_proxy_discovery` Red Hat:satellite_capsule:6.1::el7	before 0:1.0.2.1-1.el7sat	0:1.0.2.1-1.el7sat
`rubygem-smart_proxy_openscap` Red Hat:satellite_capsule:6.1::el7	before 0:0.3.0.9-1.el7sat	0:0.3.0.9-1.el7sat
`rubygem-smart_proxy_pulp` Red Hat:satellite_capsule:6.1::el7	before 0:1.0.1.2-1.el7sat	0:1.0.1.2-1.el7sat
`rubygem-tilt` Red Hat:satellite_capsule:6.1::el7	before 0:1.3.3-18.el7sat	0:1.3.3-18.el7sat
`saslwrapper` Red Hat:satellite_capsule:6.1::el7	before 0:0.22-5.el7sat	0:0.22-5.el7sat
`saslwrapper-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 0:0.22-5.el7sat	0:0.22-5.el7sat
`v8` Red Hat:satellite_capsule:6.1::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`v8-debuginfo` Red Hat:satellite_capsule:6.1::el7	before 1:3.14.5.10-11.el7sat	1:3.14.5.10-11.el7sat
`aether` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`aether-api` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`aether-connector-wagon` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`aether-impl` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`aether-spi` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`aether-util` Red Hat:satellite:6.1::el7	before 0:1.13.1-13.el7	0:1.13.1-13.el7
`ant-junit` Red Hat:satellite:6.1::el7	before 0:1.9.2-9.el7	0:1.9.2-9.el7
`aopalliance` Red Hat:satellite:6.1::el7	before 0:1.0-8.el7	0:1.0-8.el7
`apache-commons-codec-eap6` Red Hat:satellite:6.1::el7	before 0:1.4-16.redhat_3.1.ep6.el7	0:1.4-16.redhat_3.1.ep6.el7
`apache-commons-net` Red Hat:satellite:6.1::el7	before 0:3.2-8.el7	0:3.2-8.el7
`apache-ivy` Red Hat:satellite:6.1::el7	before 0:2.3.0-4.el7	0:2.3.0-4.el7
`apache-mime4j` Red Hat:satellite:6.1::el7	before 0:0.6-10.redhat_3.1.ep6.el7	0:0.6-10.redhat_3.1.ep6.el7
`apache-parent` Red Hat:satellite:6.1::el7	before 0:10-14.el7	0:10-14.el7
`apache-resource-bundles` Red Hat:satellite:6.1::el7	before 0:2-11.el7	0:2-11.el7
`atinject` Red Hat:satellite:6.1::el7	before 0:1-13.20100611svn86.el7	0:1-13.20100611svn86.el7
`bouncycastle` Red Hat:satellite:6.1::el7	before 0:1.46-7.el7	0:1.46-7.el7
`bsf` Red Hat:satellite:6.1::el7	before 0:2.4.0-19.el7	0:2.4.0-19.el7
`c3p0` Red Hat:satellite:6.1::el7	before 0:0.9.1.2-3.ep6.el7	0:0.9.1.2-3.ep6.el7
`candlepin` Red Hat:satellite:6.1::el7	before 0:0.9.49.3-1.el7	0:0.9.49.3-1.el7
`candlepin-common` Red Hat:satellite:6.1::el7	before 0:1.0.22-1.el7	0:1.0.22-1.el7
`candlepin-guice` Red Hat:satellite:6.1::el7	before 0:3.0-2_redhat_1.el7	0:3.0-2_redhat_1.el7
`candlepin-scl` Red Hat:satellite:6.1::el7	before 0:1-5.el7	0:1-5.el7
`candlepin-scl-quartz` Red Hat:satellite:6.1::el7	before 0:2.1.5-6.el7	0:2.1.5-6.el7
`candlepin-scl-rhino` Red Hat:satellite:6.1::el7	before 0:1.7R3-3.el7	0:1.7R3-3.el7
`candlepin-scl-runtime` Red Hat:satellite:6.1::el7	before 0:1-5.el7	0:1-5.el7
`candlepin-selinux` Red Hat:satellite:6.1::el7	before 0:0.9.49.3-1.el7	0:0.9.49.3-1.el7
`candlepin-tomcat` Red Hat:satellite:6.1::el7	before 0:0.9.49.3-1.el7	0:0.9.49.3-1.el7
`cdi-api` Red Hat:satellite:6.1::el7	before 0:1.0-11.SP4.el7	0:1.0-11.SP4.el7
`cglib` Red Hat:satellite:6.1::el7	before 0:2.2-18.el7	0:2.2-18.el7
`createrepo_c` Red Hat:satellite:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`createrepo_c-debuginfo` Red Hat:satellite:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`createrepo_c-libs` Red Hat:satellite:6.1::el7	before 0:0.7.4-1.el7sat	0:0.7.4-1.el7sat
`elasticsearch` Red Hat:satellite:6.1::el7	before 0:0.90.10-7.el7	0:0.90.10-7.el7
`facter` Red Hat:satellite:6.1::el7	before 1:1.7.6-2.1.el7sat	1:1.7.6-2.1.el7sat
`facter-debuginfo` Red Hat:satellite:6.1::el7	before 1:1.7.6-2.1.el7sat	1:1.7.6-2.1.el7sat
`fasterxml-oss-parent` Red Hat:satellite:6.1::el7	before 0:11-2.ep6.el7	0:11-2.ep6.el7
`felix-framework` Red Hat:satellite:6.1::el7	before 0:4.2.1-5.el7	0:4.2.1-5.el7
`foreman` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-compute` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-debug` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-discovery-image` Red Hat:satellite:6.1::el7	before 1:2.1.0-36.el7sat	1:2.1.0-36.el7sat
`foreman-gce` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-libvirt` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-ovirt` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-postgresql` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`foreman-proxy` Red Hat:satellite:6.1::el7	before 0:1.7.2.5-1.el7sat	0:1.7.2.5-1.el7sat
`foreman-selinux` Red Hat:satellite:6.1::el7	before 0:1.7.2.13-1.el7sat	0:1.7.2.13-1.el7sat
`foreman-vmware` Red Hat:satellite:6.1::el7	before 0:1.7.2.33-1.el7sat	0:1.7.2.33-1.el7sat
`gettext-commons` Red Hat:satellite:6.1::el7	before 0:0.9.6-7.el7	0:0.9.6-7.el7
`gofer` Red Hat:satellite:6.1::el7	before 0:2.6.2-2.el7sat	0:2.6.2-2.el7sat
`google-guice` Red Hat:satellite:6.1::el7	before 0:3.1.3-9.el7	0:3.1.3-9.el7
`gperftools` Red Hat:satellite:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`gperftools-debuginfo` Red Hat:satellite:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`gperftools-libs` Red Hat:satellite:6.1::el7	before 0:2.0-3.el7sat.2	0:2.0-3.el7sat.2
`groovy` Red Hat:satellite:6.1::el7	before 0:1.8.9-7.el7	0:1.8.9-7.el7
`guava` Red Hat:satellite:6.1::el7	before 0:13.0-6.el7	0:13.0-6.el7
`gutterball` Red Hat:satellite:6.1::el7	before 0:1.0.15.0-1.el7	0:1.0.15.0-1.el7
`hawtjni` Red Hat:satellite:6.1::el7	before 0:1.6-9.el7	0:1.6-9.el7
`hfsplus-tools` Red Hat:satellite:6.1::el7	before 0:332.14-12.el7	0:332.14-12.el7
`hfsplus-tools-debuginfo` Red Hat:satellite:6.1::el7	before 0:332.14-12.el7	0:332.14-12.el7
`hibernate-beanvalidation-api` Red Hat:satellite:6.1::el7	before 0:1.0.0-4.7.GA_redhat_2.ep6.el7.3	0:1.0.0-4.7.GA_redhat_2.ep6.el7.3
`hibernate-jpa-2.0-api` Red Hat:satellite:6.1::el7	before 0:1.0.1-5.Final_redhat_2.1.ep6.el7.4	0:1.0.1-5.Final_redhat_2.1.ep6.el7.4
`hibernate3-commons-annotations` Red Hat:satellite:6.1::el7	before 0:4.0.1-5.Final_redhat_2.1.ep6.el7.3	0:4.0.1-5.Final_redhat_2.1.ep6.el7.3
`hibernate4` Red Hat:satellite:6.1::el7	before 0:4.2.7-6.SP2_redhat_1.1.ep6.el7	0:4.2.7-6.SP2_redhat_1.1.ep6.el7
`hibernate4-c3p0` Red Hat:satellite:6.1::el7	before 0:4.2.7-6.SP2_redhat_1.1.ep6.el7	0:4.2.7-6.SP2_redhat_1.1.ep6.el7
`hibernate4-core` Red Hat:satellite:6.1::el7	before 0:4.2.7-6.SP2_redhat_1.1.ep6.el7	0:4.2.7-6.SP2_redhat_1.1.ep6.el7
`hibernate4-entitymanager` Red Hat:satellite:6.1::el7	before 0:4.2.7-6.SP2_redhat_1.1.ep6.el7	0:4.2.7-6.SP2_redhat_1.1.ep6.el7
`hibernate4-validator` Red Hat:satellite:6.1::el7	before 0:4.3.1-1.Final_redhat_1.1.ep6.el7.4	0:4.3.1-1.Final_redhat_1.1.ep6.el7.4
`hiera` Red Hat:satellite:6.1::el7	before 0:1.3.1-2.el7	0:1.3.1-2.el7
`hornetq` Red Hat:satellite:6.1::el7	before 0:2.3.14-1.Final_redhat_1.1.ep6.el7	0:2.3.14-1.Final_redhat_1.1.ep6.el7
`ipxe-bootimgs` Red Hat:satellite:6.1::el7	before 0:20130517-7.1fm.gitc4bce43.el7sat	0:20130517-7.1fm.gitc4bce43.el7sat
`jackson-annotations` Red Hat:satellite:6.1::el7	before 0:2.3.0-3.ep6.el7	0:2.3.0-3.ep6.el7
`jackson-core` Red Hat:satellite:6.1::el7	before 0:2.3.0-1.ep6.el7	0:2.3.0-1.ep6.el7
`jackson-databind` Red Hat:satellite:6.1::el7	before 0:2.3.0-2.ep6.el7	0:2.3.0-2.ep6.el7
`jackson-datatype-hibernate` Red Hat:satellite:6.1::el7	before 0:2.3.0-1.ep6.el7	0:2.3.0-1.ep6.el7
`jackson-datatype-hibernate-parent` Red Hat:satellite:6.1::el7	before 0:2.3.0-1.ep6.el7	0:2.3.0-1.ep6.el7
`jackson-datatype-hibernate4` Red Hat:satellite:6.1::el7	before 0:2.3.0-1.ep6.el7	0:2.3.0-1.ep6.el7
`jackson-jaxrs-base` Red Hat:satellite:6.1::el7	before 0:2.3.0-5.ep6.el7	0:2.3.0-5.ep6.el7
`jackson-jaxrs-json-provider` Red Hat:satellite:6.1::el7	before 0:2.3.0-5.ep6.el7	0:2.3.0-5.ep6.el7
`jackson-jaxrs-providers` Red Hat:satellite:6.1::el7	before 0:2.3.0-5.ep6.el7	0:2.3.0-5.ep6.el7
`jackson-module-jaxb-annotations` Red Hat:satellite:6.1::el7	before 0:2.3.0-2.ep6.el7	0:2.3.0-2.ep6.el7
`janino` Red Hat:satellite:6.1::el7	before 0:2.6.1-2.el7	0:2.6.1-2.el7
`jansi` Red Hat:satellite:6.1::el7	before 0:1.9-7.el7	0:1.9-7.el7
`jansi-native` Red Hat:satellite:6.1::el7	before 0:1.4-10.el7	0:1.4-10.el7
`jboss-ejb-3.1-api` Red Hat:satellite:6.1::el7	before 0:1.0.2-10.el7	0:1.0.2-10.el7
`jboss-el-2.2-api` Red Hat:satellite:6.1::el7	before 0:1.0.1-0.7.20120212git2fabd8.el7	0:1.0.1-0.7.20120212git2fabd8.el7
`jboss-interceptors-1.1-api` Red Hat:satellite:6.1::el7	before 0:1.0.2-0.9.20120319git49a904.el7	0:1.0.2-0.9.20120319git49a904.el7
`jboss-jaxb-api_2.2_spec` Red Hat:satellite:6.1::el7	before 0:1.0.4-3.Final_redhat_2.1.ep6.el7.1	0:1.0.4-3.Final_redhat_2.1.ep6.el7.1
`jboss-jaxrpc-1.1-api` Red Hat:satellite:6.1::el7	before 0:1.0.1-7.el7	0:1.0.1-7.el7
`jboss-logging` Red Hat:satellite:6.1::el7	before 0:3.1.4-1.GA_redhat_1.1.ep6.el7	0:3.1.4-1.GA_redhat_1.1.ep6.el7
`jboss-parent` Red Hat:satellite:6.1::el7	before 0:14-2.el7	0:14-2.el7
`jboss-servlet-3.0-api` Red Hat:satellite:6.1::el7	before 0:1.0.1-9.el7	0:1.0.1-9.el7
`jboss-specs-parent` Red Hat:satellite:6.1::el7	before 0:1.0.0-0.7.Beta2.el7	0:1.0.0-0.7.Beta2.el7
`jboss-transaction-1.1-api` Red Hat:satellite:6.1::el7	before 0:1.0.1-8.el7	0:1.0.1-8.el7
`jboss-transaction-api_1.1_spec` Red Hat:satellite:6.1::el7	before 0:1.0.1-9.Final_redhat_2.2.ep6.el7	0:1.0.1-9.Final_redhat_2.2.ep6.el7
`jsch` Red Hat:satellite:6.1::el7	before 0:0.1.50-5.el7	0:0.1.50-5.el7
`jsoup` Red Hat:satellite:6.1::el7	before 0:1.6.1-10.el7	0:1.6.1-10.el7
`jsr-305` Red Hat:satellite:6.1::el7	before 0:0-0.18.20090319svn.el7	0:0-0.18.20090319svn.el7
`jsr-311` Red Hat:satellite:6.1::el7	before 0:1.1.1-6.el7	0:1.1.1-6.el7
`jzlib` Red Hat:satellite:6.1::el7	before 0:1.1.1-6.el7	0:1.1.1-6.el7
`katello` Red Hat:satellite:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-agent` Red Hat:satellite:6.1::el7	before 0:2.2.5-1.el7sat	0:2.2.5-1.el7sat
`katello-certs-tools` Red Hat:satellite:6.1::el7	before 0:2.2.1-1.el7sat	0:2.2.1-1.el7sat
`katello-common` Red Hat:satellite:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-debug` Red Hat:satellite:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-installer` Red Hat:satellite:6.1::el7	before 0:2.3.17-1.el7sat	0:2.3.17-1.el7sat
`katello-installer-base` Red Hat:satellite:6.1::el7	before 0:2.3.17-1.el7sat	0:2.3.17-1.el7sat
`katello-service` Red Hat:satellite:6.1::el7	before 0:2.2.0.14-1.el7sat	0:2.2.0.14-1.el7sat
`katello-utils` Red Hat:satellite:6.1::el7	before 0:2.2.5-1.el7sat	0:2.2.5-1.el7sat
`libdb-cxx` Red Hat:satellite:6.1::el7	before 0:5.3.21-17.el7_0.1	0:5.3.21-17.el7_0.1
`libdb-debuginfo` Red Hat:satellite:6.1::el7	before 0:5.3.21-17.el7_0.1	0:5.3.21-17.el7_0.1
`libqpid-dispatch` Red Hat:satellite:6.1::el7	before 0:0.4-7.el7	0:0.4-7.el7
`liquibase` Red Hat:satellite:6.1::el7	before 0:3.1.0-1.el7	0:3.1.0-1.el7
`livecd-tools` Red Hat:satellite:6.1::el7	before 1:20.4-1.5.el7sat	1:20.4-1.5.el7sat
`logback` Red Hat:satellite:6.1::el7	before 0:1.0.13-6.el7	0:1.0.13-6.el7
`lucene4` Red Hat:satellite:6.1::el7	before 0:4.6.1-1.el7sat	0:4.6.1-1.el7sat
`lucene4-contrib` Red Hat:satellite:6.1::el7	before 0:4.6.1-1.el7sat	0:4.6.1-1.el7sat
`maven` Red Hat:satellite:6.1::el7	before 0:3.0.5-16.el7	0:3.0.5-16.el7
`maven-artifact` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-artifact-manager` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-artifact-resolver` Red Hat:satellite:6.1::el7	before 1:1.0-10.el7	1:1.0-10.el7
`maven-common-artifact-filters` Red Hat:satellite:6.1::el7	before 0:1.4-11.el7	0:1.4-11.el7
`maven-compiler-plugin` Red Hat:satellite:6.1::el7	before 0:3.1-4.el7	0:3.1-4.el7
`maven-file-management` Red Hat:satellite:6.1::el7	before 1:1.2.1-8.el7	1:1.2.1-8.el7
`maven-filtering` Red Hat:satellite:6.1::el7	before 0:1.1-3.el7	0:1.1-3.el7
`maven-invoker` Red Hat:satellite:6.1::el7	before 0:2.1.1-9.el7	0:2.1.1-9.el7
`maven-model` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-monitor` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-parent` Red Hat:satellite:6.1::el7	before 0:20-5.el7	0:20-5.el7
`maven-plugin-registry` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-profile` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-project` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7
`maven-release` Red Hat:satellite:6.1::el7	before 0:2.2.1-12.el7	0:2.2.1-12.el7
`maven-release-manager` Red Hat:satellite:6.1::el7	before 0:2.2.1-12.el7	0:2.2.1-12.el7
`maven-release-plugin` Red Hat:satellite:6.1::el7	before 0:2.2.1-12.el7	0:2.2.1-12.el7
`maven-remote-resources-plugin` Red Hat:satellite:6.1::el7	before 0:1.4-7.el7	0:1.4-7.el7
`maven-scm` Red Hat:satellite:6.1::el7	before 0:1.8.1-2.el7	0:1.8.1-2.el7
`maven-settings` Red Hat:satellite:6.1::el7	before 0:2.2.1-47.el7	0:2.2.1-47.el7

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-4346 is a medium vulnerability (CVSS 4.3) in Urbanairship Python-oauth2, published May 20, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.43%, the 84th percentile. Fixed in oauth2 1.9rc1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 426 package rows and 384 references. The JSON record has them. Also not on the record: 471 package claims. ID and package lookups still check them.