CVE-2016-1242: Infoleak
fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
Other sources
fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1242?
CVE-2016-1242 is classified as a moderate severity vulnerability due to its potential for unauthorized file access by authenticated users.
How do I fix CVE-2016-1242?
To fix CVE-2016-1242, update your Tryton installation to version 4.0.4 or any of the remedied versions listed in the documentation.
What type of attack is CVE-2016-1242 associated with?
CVE-2016-1242 is associated with attacks that exploit improper file access controls, allowing remote authenticated users to read arbitrary files.
Which versions of Tryton are affected by CVE-2016-1242?
Versions of Tryton prior to 3.2.17, 3.4.14, 3.6.12, 3.8.8, and 4.0.4 are affected by CVE-2016-1242.
What impacts does CVE-2016-1242 have on affected systems?
CVE-2016-1242 allows authenticated users to gain unauthorized access to sensitive files, compromising the confidentiality of information.