CVE-2012-5507 in Plone
Сводка (Английский)
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
24.10.2012
Раскрытие
30.09.2014
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 71688 | Plone состояние гонки | 362 | Не определено | Официальное исправление | CVE-2012-5507 |