Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2016-1241

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.

VectorNETWORK

PublishedSep 07, 2016, 19:28

Published Bysecurity@debian.org

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

trytond(PyPI)3.0.03.2.17N/A

trytond(PyPI)3.4.03.4.14N/A

trytond(PyPI)3.8.03.8.8N/A

trytond(PyPI)3.6.03.6.12N/A

trytond(PyPI)4.0.04.0.4N/A

References

http://www.debian.org/security/2016/dsa-3656
http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
https://bugs.tryton.org/issue5795

Weakness Type

CWE-200

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK