CVE-2016-1241: Infoleak
Published Sep 7, 2016
·Updated
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Affected Software
45 affected componentsFixes available
pip/trytond>=4.0.0<4.0.4
4.0.4
pip/trytond>=3.6.0<3.6.12
3.6.12
pip/trytond>=3.8.0<3.8.8
3.8.8
pip/trytond>=3.4.0<3.4.14
3.4.14
pip/trytond>=3.0.0<3.2.17
3.2.17
tryton Tryton=3.8.0
tryton Tryton=3.8.1
tryton Tryton=3.8.2
tryton Tryton=3.8.3
tryton Tryton=3.8.4
tryton Tryton=3.8.5
tryton Tryton=3.8.6
tryton Tryton=3.8.7
tryton Tryton=4.0.0
tryton Tryton=4.0.1
tryton Tryton=4.0.2
tryton Tryton=4.0.3
tryton Tryton<=3.2.16
tryton Tryton=3.2.0
tryton Tryton=3.6.0
tryton Tryton=3.6.1
tryton Tryton=3.6.2
tryton Tryton=3.6.3
tryton Tryton=3.6.4
tryton Tryton=3.6.5
tryton Tryton=3.6.6
tryton Tryton=3.6.7
tryton Tryton=3.6.8
tryton Tryton=3.6.9
tryton Tryton=3.6.10
tryton Tryton=3.6.11
tryton Tryton=3.4.0
tryton Tryton=3.4.1
tryton Tryton=3.4.2
tryton Tryton=3.4.3
tryton Tryton=3.4.4
tryton Tryton=3.4.5
tryton Tryton=3.4.6
tryton Tryton=3.4.7
tryton Tryton=3.4.8
tryton Tryton=3.4.9
tryton Tryton=3.4.10
tryton Tryton=3.4.11
tryton Tryton=3.4.12
tryton Tryton=3.4.13
Event History
Sep 7, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·03:49 AM
Frequently Asked Questions
1
What is the severity of CVE-2016-1241?
CVE-2016-1241 has been classified as a medium severity vulnerability affecting certain versions of Tryton.
2
How do I fix CVE-2016-1241?
To fix CVE-2016-1241, upgrade your Tryton installation to versions 4.0.4, 3.8.8, 3.6.12, or 3.4.14.
3
What types of users are affected by CVE-2016-1241?
Remote authenticated users can potentially exploit CVE-2016-1241 to discover user password hashes.
4
Which versions of Tryton are vulnerable to CVE-2016-1241?
Tryton versions prior to 4.0.4, 3.8.8, 3.6.12, and 3.4.14 are vulnerable to CVE-2016-1241.
5
Is there a patch available for CVE-2016-1241?
Yes, patches are included in the respective fixed versions of Tryton mentioned in the remediation.