QwikSec

Security Database

CVE

CWE

Training

CVE-2016-1242

Published: Sep 7, 2016

Modified: Aug 5, 2024

PUBLISHED

Description

file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_DEBIAN

https://bugs.tryton.org/issue5808

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.