Description

AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.

Remediation

References

CVE-2012-5507

Related Vulnerabilities

GlassFish CVE-2018-2911 Vulnerability (CVE-2018-2911)

WordPress Plugin WP eCommerce Multiple Unspecified Vulnerabilities (3.9.3)

Oracle Database Server CVE-2020-2968 Vulnerability (CVE-2020-2968)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6897)

Oracle HTTP Server NULL Pointer Dereference Vulnerability (CVE-2019-10097)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-362 CVE-2012-5507