Description

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

Remediation

References

CVE-2012-5507

Related Vulnerabilities

WordPress Plugin Shield Security-Smart Bot Blocking & Intrusion Prevention Security Cross-Site Request Forgery (19.1.10)

Claroline Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3716)

Apache Tomcat Other Vulnerability (CVE-2003-0043)

WordPress Plugin Simple Ads Manager Denial of Service (2.9.3.114)

WebLogic Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-17359)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-362 CVE-2012-5507