{
  "threat_severity" : "Moderate",
  "public_date" : "2025-06-09T17:57:47Z",
  "bugzilla" : {
    "description" : "requests: Requests vulnerable to .netrc credentials leak via malicious URLs",
    "id" : "2371272",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2371272"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.3",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
    "status" : "verified"
  },
  "cwe" : "CWE-522",
  "details" : [ "Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.", "A flaw was found in the Requests HTTP library. This vulnerability allows leakage of .netrc credentials to third parties via maliciously crafted URLs that exploit a URL parsing issue." ],
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "release_date" : "2025-08-11T00:00:00Z",
    "advisory" : "RHSA-2025:13604",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10.0",
    "package" : "python-requests-0:2.32.4-1.el10_0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2025-08-27T00:00:00Z",
    "advisory" : "RHSA-2025:14750",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8",
    "package" : "fence-agents-0:4.2.1-129.el8_10.14"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2025-09-02T00:00:00Z",
    "advisory" : "RHSA-2025:14999",
    "cpe" : "cpe:/a:redhat:enterprise_linux:8::highavailability",
    "package" : "resource-agents-0:4.9.0-54.el8_10.16"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "release_date" : "2025-08-06T00:00:00Z",
    "advisory" : "RHSA-2025:13234",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8",
    "package" : "python-requests-0:2.20.0-6.el8_10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.2 Advanced Update Support",
    "release_date" : "2025-09-15T00:00:00Z",
    "advisory" : "RHSA-2025:15723",
    "cpe" : "cpe:/o:redhat:rhel_aus:8.2",
    "package" : "python-requests-0:2.20.0-3.el8_2"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15622",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4",
    "package" : "fence-agents-0:4.2.1-65.el8_4.21"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15618",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.4::highavailability",
    "package" : "resource-agents-0:4.1.1-90.el8_4.20"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "release_date" : "2025-09-11T00:00:00Z",
    "advisory" : "RHSA-2025:15691",
    "cpe" : "cpe:/o:redhat:rhel_aus:8.4",
    "package" : "python-requests-0:2.20.0-3.el8_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15622",
    "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4",
    "package" : "fence-agents-0:4.2.1-65.el8_4.21"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15618",
    "cpe" : "cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability",
    "package" : "resource-agents-0:4.1.1-90.el8_4.20"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "release_date" : "2025-09-11T00:00:00Z",
    "advisory" : "RHSA-2025:15691",
    "cpe" : "cpe:/o:redhat:rhel_eus_long_life:8.4",
    "package" : "python-requests-0:2.20.0-3.el8_4"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15615",
    "cpe" : "cpe:/a:redhat:rhel_aus:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.15"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:15122",
    "cpe" : "cpe:/o:redhat:rhel_aus:8.6",
    "package" : "python-requests-0:2.20.0-3.el8_6.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15615",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.15"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15617",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.6::highavailability",
    "package" : "resource-agents-0:4.9.0-16.el8_6.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:15122",
    "cpe" : "cpe:/o:redhat:rhel_tus:8.6",
    "package" : "python-requests-0:2.20.0-3.el8_6.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15615",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.6",
    "package" : "fence-agents-0:4.2.1-89.el8_6.15"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15617",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.6::highavailability",
    "package" : "resource-agents-0:4.9.0-16.el8_6.17"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:15122",
    "cpe" : "cpe:/o:redhat:rhel_e4s:8.6",
    "package" : "python-requests-0:2.20.0-3.el8_6.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15614",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.8",
    "package" : "fence-agents-0:4.2.1-112.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15616",
    "cpe" : "cpe:/a:redhat:rhel_tus:8.8::highavailability",
    "package" : "resource-agents-0:4.9.0-40.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:15121",
    "cpe" : "cpe:/o:redhat:rhel_tus:8.8",
    "package" : "python-requests-0:2.20.0-3.el8_8.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15614",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.8",
    "package" : "fence-agents-0:4.2.1-112.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2025-09-10T00:00:00Z",
    "advisory" : "RHSA-2025:15616",
    "cpe" : "cpe:/a:redhat:rhel_e4s:8.8::highavailability",
    "package" : "resource-agents-0:4.9.0-40.el8_8.11"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "release_date" : "2025-09-03T00:00:00Z",
    "advisory" : "RHSA-2025:15121",
    "cpe" : "cpe:/o:redhat:rhel_e4s:8.8",
    "package" : "python-requests-0:2.20.0-3.el8_8.1"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2025-08-04T00:00:00Z",
    "advisory" : "RHSA-2025:12519",
    "cpe" : "cpe:/a:redhat:enterprise_linux:9",
    "package" : "python-requests-0:2.25.1-10.el9_6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "release_date" : "2025-08-04T00:00:00Z",
    "advisory" : "RHSA-2025:12519",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9",
    "package" : "python-requests-0:2.25.1-10.el9_6"
  }, {
    "product_name" : "Red Hat Quay 3.14",
    "release_date" : "2026-03-10T00:00:00Z",
    "advisory" : "RHSA-2026:4215",
    "cpe" : "cpe:/a:redhat:quay:3.14::el8",
    "package" : "quay/quay-rhel8:sha256:05cc4b4410de27e32897492effb21362d8c1bc8cc56e9408fc9a19f9f3149899"
  } ],
  "package_state" : [ {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Out of support scope",
    "package_name" : "rhai/assisted-installer-agent-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Out of support scope",
    "package_name" : "rhai/assisted-installer-controller-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "Assisted Installer for Red Hat OpenShift Container Platform 2",
    "fix_state" : "Out of support scope",
    "package_name" : "rhai/assisted-installer-rhel9",
    "cpe" : "cpe:/a:redhat:assisted_installer:2"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-builds/openshift-builds-shared-resource-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Builds for Red Hat OpenShift",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-builds/openshift-builds-shared-resource-webhook-rhel9",
    "cpe" : "cpe:/a:redhat:openshift_builds:1"
  }, {
    "product_name" : "Confidential Compute Attestation",
    "fix_state" : "Fix deferred",
    "package_name" : "confidential-compute-attestation-tech-preview/trustee-rhel9",
    "cpe" : "cpe:/a:redhat:confidential_compute_attestation:1"
  }, {
    "product_name" : "Custom Metric Autoscaler operator for Red Hat Openshift",
    "fix_state" : "Fix deferred",
    "package_name" : "custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle",
    "cpe" : "cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
  }, {
    "product_name" : "Multiarch Tuning Operator",
    "fix_state" : "Fix deferred",
    "package_name" : "multiarch-tuning/multiarch-tuning-rhel9-operator",
    "cpe" : "cpe:/a:redhat:multiarch_tuning_operator"
  }, {
    "product_name" : "Network Observability Operator",
    "fix_state" : "Will not fix",
    "package_name" : "network-observability/network-observability-cli-rhel9",
    "cpe" : "cpe:/a:redhat:network_observ_optr:1"
  }, {
    "product_name" : "OpenShift Serverless",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-serverless-1/kn-eventing-istio-controller-rhel8",
    "cpe" : "cpe:/a:redhat:serverless:1"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-cni-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-must-gather-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-pilot-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-proxyv2-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-rhel9-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/istio-sail-operator-bundle",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/kiali-ossmc-rhel9",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "OpenShift Service Mesh 3",
    "fix_state" : "Fix deferred",
    "package_name" : "openshift-service-mesh/kiali-rhel9-operator",
    "cpe" : "cpe:/a:redhat:service_mesh:3"
  }, {
    "product_name" : "Red Hat AI Inference Server",
    "fix_state" : "Fix deferred",
    "package_name" : "rhaiis/vllm-cuda-rhel9",
    "cpe" : "cpe:/a:redhat:ai_inference_server:3"
  }, {
    "product_name" : "Red Hat AI Inference Server",
    "fix_state" : "Fix deferred",
    "package_name" : "rhaiis/vllm-rocm-rhel9",
    "cpe" : "cpe:/a:redhat:ai_inference_server:3"
  }, {
    "product_name" : "Red Hat Ansible Automation Platform 2",
    "fix_state" : "Fix deferred",
    "package_name" : "python-requests",
    "cpe" : "cpe:/a:redhat:ansible_automation_platform:2"
  }, {
    "product_name" : "Red Hat build of Quarkus Native builder",
    "fix_state" : "Fix deferred",
    "package_name" : "mandrel-for-jdk-21-rhel8",
    "cpe" : "cpe:/a:redhat:quarkus:3"
  }, {
    "product_name" : "Red Hat Developer Hub",
    "fix_state" : "Fix deferred",
    "package_name" : "rhdh/rhdh-hub-rhel9",
    "cpe" : "cpe:/a:redhat:rhdh:1"
  }, {
    "product_name" : "Red Hat Developer Hub",
    "fix_state" : "Will not fix",
    "package_name" : "rhdh/rhdh-rhel9-operator",
    "cpe" : "cpe:/a:redhat:rhdh:1"
  }, {
    "product_name" : "Red Hat Discovery 1",
    "fix_state" : "Fix deferred",
    "package_name" : "discovery/discovery-server-rhel9",
    "cpe" : "cpe:/a:redhat:discovery:1"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Fix deferred",
    "package_name" : "rhem/flightctl-api-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Fix deferred",
    "package_name" : "rhem/flightctl-cli-artifacts-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Fix deferred",
    "package_name" : "rhem/flightctl-periodic-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Edge Manager preview",
    "fix_state" : "Fix deferred",
    "package_name" : "rhem/flightctl-worker-rhel9",
    "cpe" : "cpe:/a:redhat:edge_manager:0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Not affected",
    "package_name" : "python-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Out of support scope",
    "package_name" : "python-requests",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Not affected",
    "package_name" : "python-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "python-requests",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Out of support scope",
    "package_name" : "resource-agents",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "python3.11-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "python3.12-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "python39:3.9/python-requests",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Not affected",
    "package_name" : "python-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Fix deferred",
    "package_name" : "fence-agents",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "python3.11-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "python3.12-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Not affected",
    "package_name" : "python-pip",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Offline Knowledge Portal",
    "fix_state" : "Fix deferred",
    "package_name" : "offline-knowledge-portal/rhokp-rhel9",
    "cpe" : "cpe:/a:redhat:offline_knowledge_portal:1"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-dashboard-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-feast-operator-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-feature-server-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-kf-notebook-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-ml-pipelines-runtime-generic-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-modelmesh-runtime-adapter-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-model-registry-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-notebook-controller-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift AI (RHOAI)",
    "fix_state" : "Fix deferred",
    "package_name" : "rhoai/odh-trustyai-service-rhel8",
    "cpe" : "cpe:/a:redhat:openshift_ai"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "python-requests",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenShift Container Platform 4",
    "fix_state" : "Fix deferred",
    "package_name" : "rhcos",
    "cpe" : "cpe:/a:redhat:openshift:4"
  }, {
    "product_name" : "Red Hat OpenStack Platform 17.1",
    "fix_state" : "Fix deferred",
    "package_name" : "python-requests",
    "cpe" : "cpe:/a:redhat:openstack:17.1"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Fix deferred",
    "package_name" : "python-requests",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Fix deferred",
    "package_name" : "satellite-capsule:el8/python-requests",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Satellite 6",
    "fix_state" : "Fix deferred",
    "package_name" : "satellite/iop-advisor-engine-rhel9",
    "cpe" : "cpe:/a:redhat:satellite:6"
  }, {
    "product_name" : "Red Hat Update Infrastructure 4 for Cloud Providers",
    "fix_state" : "Fix deferred",
    "package_name" : "python-requests",
    "cpe" : "cpe:/a:redhat:rhui:4::el8"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2024-47081\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-47081\nhttp://seclists.org/fulldisclosure/2025/Jun/2\nhttp://www.openwall.com/lists/oss-security/2025/06/03/11\nhttp://www.openwall.com/lists/oss-security/2025/06/03/9\nhttp://www.openwall.com/lists/oss-security/2025/06/04/1\nhttp://www.openwall.com/lists/oss-security/2025/06/04/6\nhttps://github.com/psf/requests/commit/96ba401c1296ab1dda74a2365ef36d88f7d144ef\nhttps://github.com/psf/requests/pull/6965\nhttps://github.com/psf/requests/security/advisories/GHSA-9hjg-9r4m-mvj7\nhttps://requests.readthedocs.io/en/latest/api/#requests.Session.trust_env\nhttps://seclists.org/fulldisclosure/2025/Jun/2" ],
  "name" : "CVE-2024-47081",
  "mitigation" : {
    "value" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
    "lang" : "en:us"
  },
  "csaw" : false
}