Description

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

Remediation

References

CVE-2012-5507

Related Vulnerabilities

mod_ssl Other Vulnerability (CVE-2004-0700)

WordPress Plugin Nextend Google Connect Cross-Site Scripting (1.5.2)

WordPress Plugin Frontier Post Security Bypass (1.3.2)

Joomla! Core 3.x.x Multiple Vulnerabilities (3.0.0 - 3.6.4)

WordPress Plugin WP Photo Album Plus Unspecified Vulnerability (7.2.04)

Severity

Medium

Classification

CVE-2012-5507 CWE-362

Tags

Missing Update Known Vulnerabilities