---
title: "CVE-2014-0482\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2014-0482?format=md
keywords: index, follow
---

# CVE-2014-0482

Publication date 26 August 2014

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The contrib.auth.middleware.RemoteUserMiddleware middleware in Django
before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before
release candidate 3, when using the contrib.auth.backends.RemoteUserBackend
backend, allows remote authenticated users to hijack web sessions via
vectors related to the REMOTE\_USER header.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| python-django | 14.04 LTS trusty | Fixed 1.6.1-2ubuntu0.4 |
| 12.04 LTS precise | Fixed 1.3.1-4ubuntu1.12 |
| 10.04 LTS lucid | Fixed 1.1.1-2ubuntu1.13 |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)
* [Patch details](https://ubuntu.com/security/CVE-2014-0482?format=md#patch-details)

### Patch details

For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)

| Package | Patch details |
| --- | --- |
| python-django | * Upstream:   [c9e3b99](https://github.com/django/django/commit/c9e3b9949cd55f090591fbdc4a114fcb8368b6d9) * Upstream:   [0268b85](https://github.com/django/django/commit/0268b855f9eab3377f2821164ef3e66037789e09) |

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0482)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-0482)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-0482)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2014-0482)

### Related Ubuntu Security Notices (USN)

+ [USN-2347-1](https://usn.ubuntu.com/USN-2347-1)
+ Django vulnerabilities
+ 16 September 2014

### Other references

* <https://www.djangoproject.com/weblog/2014/aug/20/security/>
* <https://www.cve.org/CVERecord?id=CVE-2014-0482>