Comment 1 for bug 1801798

Revision history for this message
Ken Young (kenyis) wrote : Re: CVE-2018-18074: requests package may reveal credentials

Red Hat's analysis of this issue shows that it is criticality is low:

CVSS3 Base Score 2.6
CVSS3 Base Metrics CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N