CVE-2016-1241
3 advisories.
PyPI/trytond CVE-2016-1241: medium 5.3
Tryton allows users to read the hashed password
Action: Upgrade trytond to 3.2.17 or later.
pip install trytond==3.2.17pip install trytond==3.4.14pip install trytond==3.8.8pip install trytond==3.6.12pip install trytond==4.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.2.17 | - |
| 3.4.0 | 3.4.14 | - |
| 3.8.0 | 3.8.8 | - |
| 3.6.0 | 3.6.12 | - |
| 4.0.0 | 4.0.4 | - |
Fixed versions
| 3.2.17 | 3.4.14 | 3.8.8 | 3.6.12 | 4.0.4 |
Sources
- osv: GHSA-52j9-v3jc-9xgc
- https://nvd.nist.gov/vuln/detail/CVE-2016-1241
- https://github.com/tryton/trytond/commit/11424d57b7838381745655e2e89470ff9087cd27
- https://github.com/tryton/trytond/commit/30d2a6dcaf09340829cd70ee8a15a4941ca7161a
- https://bugs.tryton.org/issue5795
- https://github.com/pypa/advisory-database/tree/main/vulns/tryton/PYSEC-2016-40.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2016-12.yaml
- https://github.com/tryton/trytond
- http://www.debian.org/security/2016/dsa-3656
- http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
CVE-2016-1241 · published · modified · JSON
PyPI/trytond CVE-2016-1241: unknown
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Action: Upgrade trytond to 3.2.17 or later.
pip install trytond==3.2.17pip install trytond==3.4.14pip install trytond==3.6.12pip install trytond==3.8.8pip install trytond==4.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.17 | - |
| 3.4 | 3.4.14 | - |
| 3.6 | 3.6.12 | - |
| 3.8 | 3.8.8 | - |
| 4.0 | 4.0.4 | - |
Fixed versions
| 3.2.17 | 3.4.14 | 3.6.12 | 3.8.8 | 4.0.4 |
Sources
- osv: PYSEC-2016-12
- https://bugs.tryton.org/issue5795
- http://www.debian.org/security/2016/dsa-3656
- http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
- https://github.com/advisories/GHSA-52j9-v3jc-9xgc
CVE-2016-1241 · published · modified · JSON
PyPI/tryton CVE-2016-1241: medium 5.3
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Action: Upgrade tryton to 3.2.17 or later.
pip install tryton==3.2.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.17 | - |
Fixed versions
| 3.2.17 |
Sources
- osv: PYSEC-2016-40
- https://bugs.tryton.org/issue5795
- http://www.debian.org/security/2016/dsa-3656
- http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
CVE-2016-1241 · published · modified · JSON