Published: 07/09/2016 Updated: 08/09/2016

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Tryton 3.x prior to 3.2.17, 3.4.x prior to 3.4.14, 3.6.x prior to 3.6.12, 3.8.x prior to 3.8.8, and 4.x prior to 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tryton tryton 3.8.3
tryton tryton 3.8.1
tryton tryton 3.8.6
tryton tryton 3.8.5
tryton tryton 3.8.2
tryton tryton 3.8.0
tryton tryton 3.8.4
tryton tryton 3.8.7
tryton tryton 4.0.1
tryton tryton 4.0.3
tryton tryton 4.0.2
tryton tryton 4.0.0
tryton tryton
tryton tryton 3.6.10
tryton tryton 3.2.0
tryton tryton 3.6.2
tryton tryton 3.6.1
tryton tryton 3.6.11
tryton tryton 3.6.6
tryton tryton 3.6.8
tryton tryton 3.6.9
tryton tryton 3.6.0
tryton tryton 3.6.4
tryton tryton 3.6.5
tryton tryton 3.6.3
tryton tryton 3.6.7
tryton tryton 3.4.4
tryton tryton 3.4.1
tryton tryton 3.4.3
tryton tryton 3.4.10
tryton tryton 3.4.0
tryton tryton 3.4.5
tryton tryton 3.4.9
tryton tryton 3.4.6
tryton tryton 3.4.8
tryton tryton 3.4.7
tryton tryton 3.4.13
tryton tryton 3.4.12
tryton tryton 3.4.2
tryton tryton 3.4.11

Two vulnerabilities have been discovered in the server for the Tryton application platform, which may result in information disclosure of password hashes or file contents For the stable distribution (jessie), these problems have been fixed in version 340-3+deb8u2 For the unstable distribution (sid), these problems have been fixed in version 40 ...

CWE-200 https://bugs.tryton.org/issue5795 http://www.debian.org/security/2016/dsa-3656 http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html https://nvd.nist.gov https://www.debian.org/security/./dsa-3656

CVE-2016-1241

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect