CVE-2016-1241

Published Sep 7, 2016 CVSS 3.0 · 5.3 Medium EPSS 1.6% KEV · Not listed
Description
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-3656-1 tryton-server security update
EUVD EUVD EUVD-2016-0036 Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Github GHSA Github GHSA GHSA-52j9-v3jc-9xgc Tryton allows users to read the hashed password
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
debian
Published
Updated
Aug 5, 2024, 10:48 PM
Reserved
Dec 27, 2015, 12:00 AM
Status
Modified
Published
Sep 7, 2016, 7:28 PM
Modified
Jun 17, 2026, 12:41 AM