Description

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

Remediation

References

CVE-2012-5507

Related Vulnerabilities

WordPress Plugin Media Library Assistant Multiple Cross-Site Scripting Vulnerabilities (2.73)

WordPress Plugin Browser Rejector Remote File Inclusion (2.10)

Omeka Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-3981)

Joomla Improper Certificate Validation Vulnerability (CVE-2017-11364)

WordPress Plugin MATRIX 3D Cross-Site Scripting (1.2)

Severity

Medium

Classification

CVE-2012-5507 CWE-362

Tags

Missing Update Known Vulnerabilities