Description (CNA)
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html
- https://bugs.tryton.org/issue5795
- http://www.debian.org/security/2016/dsa-3656
ADP enrichment
No English description supplied.