Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2024-35195

Always-Incorrect Control Flow Implementation

Published: May 20, 2024 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
5.6 MODERATE
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-35195
CWEhttps://cwe.mitre.org/data/definitions/670.html

Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value of verify. This behavior will continue for the lifecycle of the connection in the connection pool. This vulnerability is fixed in 2.32.0.

Weakness

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

Affected Software

NameVendorStart VersionEnd Version
Red Hat Ansible Automation Platform 2.4 for RHEL 8RedHatpython3x-requests-0:2.32.2-1.el8ap*
Red Hat Ansible Automation Platform 2.4 for RHEL 8RedHatautomation-controller-0:4.5.8-1.el8ap*
Red Hat Ansible Automation Platform 2.4 for RHEL 9RedHatpython-requests-0:2.32.2-1.el9ap*
Red Hat Ansible Automation Platform 2.4 for RHEL 9RedHatautomation-controller-0:4.5.8-1.el9ap*
Red Hat Developer Hub 1.2 on RHEL 9RedHatrhdh/rhdh-hub-rhel9:1.2-105*
Red Hat Enterprise Linux 8RedHatpython-requests-0:2.20.0-5.el8_10*
Red Hat Enterprise Linux 9RedHatpython-requests-0:2.25.1-9.el9*
Red Hat Enterprise Linux 9RedHatpython-requests-0:2.25.1-9.el9*
Red Hat OpenStack Platform 17.1 for RHEL 8RedHatpython-requests-0:2.25.1-2.el8ost*
Red Hat Satellite 6.16 for RHEL 8RedHatcandlepin-0:4.4.21-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatforeman-0:3.12.0.6-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatforeman-installer-1:3.12.0.4-2.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-django-0:4.2.19-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-jinja2-0:3.1.5-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-cli-0:0.29.2-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-container-0:2.20.5-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulpcore-0:3.49.33-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-glue-0:0.29.2-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-requests-0:2.32.3-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_ansible-0:14.2.3-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_maintain-1:1.7.12-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_openscap-0:9.0.5-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_remote_execution-0:13.2.7-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_theme_satellite-0:13.3.5-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-katello-0:4.14.0.8-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatsatellite-0:6.16.3-2.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatscap-security-guide-satellite-0:1.0.0-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatcandlepin-0:4.4.21-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatforeman-0:3.12.0.6-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatforeman-installer-1:3.12.0.4-2.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-django-0:4.2.19-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-jinja2-0:3.1.5-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-cli-0:0.29.2-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-container-0:2.20.5-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulpcore-0:3.49.33-1.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-pulp-glue-0:0.29.2-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatpython-requests-0:2.32.3-2.el8pc*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_ansible-0:14.2.3-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_maintain-1:1.7.12-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_openscap-0:9.0.5-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_remote_execution-0:13.2.7-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-foreman_theme_satellite-0:13.3.5-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatrubygem-katello-0:4.14.0.8-1.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatsatellite-0:6.16.3-2.el8sat*
Red Hat Satellite 6.16 for RHEL 8RedHatscap-security-guide-satellite-0:1.0.0-1.el8sat*
Red Hat Satellite 6.16 for RHEL 9RedHatcandlepin-0:4.4.21-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatforeman-0:3.12.0.6-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatforeman-installer-1:3.12.0.4-2.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-django-0:4.2.19-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-jinja2-0:3.1.5-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-cli-0:0.29.2-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-container-0:2.20.5-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulpcore-0:3.49.33-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-glue-0:0.29.2-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-requests-0:2.32.3-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_ansible-0:14.2.3-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_maintain-1:1.7.12-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_openscap-0:9.0.5-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_remote_execution-0:13.2.7-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_theme_satellite-0:13.3.5-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-katello-0:4.14.0.8-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatsatellite-0:6.16.3-2.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatscap-security-guide-satellite-0:1.0.0-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatcandlepin-0:4.4.21-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatforeman-0:3.12.0.6-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatforeman-installer-1:3.12.0.4-2.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-django-0:4.2.19-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-jinja2-0:3.1.5-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-cli-0:0.29.2-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-container-0:2.20.5-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulpcore-0:3.49.33-1.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-pulp-glue-0:0.29.2-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatpython-requests-0:2.32.3-2.el9pc*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_ansible-0:14.2.3-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_maintain-1:1.7.12-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_openscap-0:9.0.5-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_remote_execution-0:13.2.7-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-foreman_theme_satellite-0:13.3.5-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatrubygem-katello-0:4.14.0.8-1.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatsatellite-0:6.16.3-2.el9sat*
Red Hat Satellite 6.16 for RHEL 9RedHatscap-security-guide-satellite-0:1.0.0-1.el9sat*
RHUI 4 for RHEL 8RedHatpython-requests-0:2.32.3-2.el8ui*
Red Hat Discovery 1.14RedHatdiscovery/discovery-ui-rhel9:sha256:c960fa13577db72b52765d6941688f431f61fe38adb717b2d8bb6569e241bc5e*
Python-pipUbuntudevel*
Python-pipUbuntuesm-apps/bionic*
Python-pipUbuntuesm-apps/focal*
Python-pipUbuntuesm-apps/jammy*
Python-pipUbuntuesm-apps/noble*
Python-pipUbuntuesm-apps/xenial*
Python-pipUbuntuesm-infra-legacy/trusty*
Python-pipUbuntufocal*
Python-pipUbuntujammy*
Python-pipUbuntumantic*
Python-pipUbuntunoble*
Python-pipUbuntuoracular*
Python-pipUbuntuplucky*
Python-pipUbuntuquesting*
Python-pipUbuntutrusty/esm*
RequestsUbuntudevel*
RequestsUbuntuesm-infra-legacy/trusty*
RequestsUbuntuesm-infra/bionic*
RequestsUbuntuesm-infra/focal*
RequestsUbuntuesm-infra/xenial*
RequestsUbuntufocal*
RequestsUbuntujammy*
RequestsUbuntumantic*
RequestsUbuntunoble*
RequestsUbuntuoracular*
RequestsUbuntuplucky*
RequestsUbuntuquesting*
RequestsUbuntutrusty/esm*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use