GitHub Advisoryadvisory · PyPI

GHSA-52j9-v3jc-9xgc Tryton allows users to read the hashed password

MEDIUM Published 2022-05-17 Modified 2024-11-22 Official page ↗
Aliases
CVE-2016-1241
Ecosystem
PyPI
Packages
trytond
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200
Reviewed
2024-04-29

Affected packages

• PyPI trytond: >= 3.0.0, < 3.2.17 → fixed in 3.2.17 • PyPI trytond: >= 3.4.0, < 3.4.14 → fixed in 3.4.14 • PyPI trytond: >= 3.8.0, < 3.8.8 → fixed in 3.8.8 • PyPI trytond: >= 3.6.0, < 3.6.12 → fixed in 3.6.12 • PyPI trytond: >= 4.0.0, < 4.0.4 → fixed in 4.0.4

Description

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2016-1241 Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References