Описание
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zope2.12 | fixed | 2.12.26-1 | package |
Примечания
https://plone.org/products/plone/security/advisories/20121106/23
EPSS
Процентиль: 70%
0.01427
Низкий
Связанные уязвимости
redhat
почти 14 лет назад
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
nvd
почти 12 лет назад
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
EPSS
Процентиль: 70%
0.01427
Низкий