Description

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

Remediation

References

CVE-2012-5507

Related Vulnerabilities

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-1000504)

Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834)

WordPress Plugin Admin Columns Pro Cross-Site Scripting (5.5.1)

WordPress Plugin Facebook Members Cross-Site Request Forgery (5.0.4)

Zikula Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2016-9835)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-362 CVE-2012-5507