Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-5507
4.3
MEDIUMCVSS v2
Published
September 30, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
zopefoundation/Zope
GitHubZope is an open-source web application server.
GitHubZope is an open-source web application server.= 2.8.8, = 2.10.8, = 2.7.0, = 2.11.1, = 2.11.3, = 2.9.2, = 2.7.6, = 2.9.4, = 2.9.5, = 2.10.3, = 2.6.1, = 2.7.7, = 2.8.1, = 2.9.7, = 2.11.0, = 2.11.2, = 2.8.6, = 2.9.3, = 2.7.3, = 2.7.4, = 2.7.5, = 2.13.18, = 2.5.1, = 2.6.4, = 2.7.8, = 2.8.4, = 2.9.6NVD