tocsin

Debian/tryton-server: medium 5.3

Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.

Action: Upgrade tryton-server to 4.0.4-1 or later.

Affected

introducedfixedlast affected
04.0.4-1-

Fixed versions

4.0.4-1

Sources

published · modified · JSON