CVE-2016-1242 Tryton allow authenticated users with certain permissions to read arbitrary files via the name parameter
MediumCVSS 4.4
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi trytond(PyPI) | < 3.2.17 | 3.2.17 |
| pypi trytond(PyPI) | = 1.0.0 | No fix listed |
| pypi trytond(PyPI) | = 1.0.1 | No fix listed |
| pypi trytond(PyPI) | = 1.0.2 | No fix listed |
| pypi trytond(PyPI) | = 1.0.3 | No fix listed |
| pypi trytond(PyPI) | = 1.0.4 | No fix listed |
| pypi trytond(PyPI) | = 1.0.5 | No fix listed |
| pypi trytond(PyPI) | = 1.0.6 | No fix listed |
| pypi trytond(PyPI) | = 1.0.7 | No fix listed |
| pypi trytond(PyPI) | = 1.0.8 | No fix listed |
| pypi trytond(PyPI) | = 1.0.9 | No fix listed |
| pypi trytond(PyPI) | = 1.2.0 | No fix listed |
| pypi trytond(PyPI) | = 1.2.1 | No fix listed |
| pypi trytond(PyPI) | = 1.2.10 | No fix listed |
| pypi trytond(PyPI) | = 1.2.2 | No fix listed |
| pypi trytond(PyPI) | = 1.2.3 | No fix listed |
| pypi trytond(PyPI) | = 1.2.4 | No fix listed |
| pypi trytond(PyPI) | = 1.2.5 | No fix listed |
| pypi trytond(PyPI) | = 1.2.6 | No fix listed |
| pypi trytond(PyPI) | = 1.2.7 | No fix listed |
| pypi trytond(PyPI) | = 1.2.8 | No fix listed |
| pypi trytond(PyPI) | = 1.2.9 | No fix listed |
| pypi trytond(PyPI) | = 1.4.0 | No fix listed |
| pypi trytond(PyPI) | = 1.4.1 | No fix listed |
| pypi trytond(PyPI) | = 1.4.10 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi trytond(PyPI) | = 1.4.11 | No fix listed |
| pypi trytond(PyPI) | = 1.4.12 | No fix listed |
| pypi trytond(PyPI) | = 1.4.13 | No fix listed |
| pypi trytond(PyPI) | = 1.4.2 | No fix listed |
| pypi trytond(PyPI) | = 1.4.3 | No fix listed |
| pypi trytond(PyPI) | = 1.4.4 | No fix listed |
| pypi trytond(PyPI) | = 1.4.5 | No fix listed |
| pypi trytond(PyPI) | = 1.4.6 | No fix listed |
| pypi trytond(PyPI) | = 1.4.7 | No fix listed |
| pypi trytond(PyPI) | = 1.4.8 | No fix listed |
| pypi trytond(PyPI) | = 1.4.9 | No fix listed |
| pypi trytond(PyPI) | = 1.6.0 | No fix listed |
| pypi trytond(PyPI) | = 1.6.1 | No fix listed |
| pypi trytond(PyPI) | = 1.6.10 | No fix listed |
| pypi trytond(PyPI) | = 1.6.2 | No fix listed |
| pypi trytond(PyPI) | = 1.6.3 | No fix listed |
| pypi trytond(PyPI) | = 1.6.4 | No fix listed |
| pypi trytond(PyPI) | = 1.6.5 | No fix listed |
| pypi trytond(PyPI) | = 1.6.6 | No fix listed |
| pypi trytond(PyPI) | = 1.6.7 | No fix listed |
| pypi trytond(PyPI) | = 1.6.8 | No fix listed |
| pypi trytond(PyPI) | = 1.6.9 | No fix listed |
| pypi trytond(PyPI) | = 1.8.0 | No fix listed |
| pypi trytond(PyPI) | = 1.8.1 | No fix listed |
| pypi trytond(PyPI) | = 1.8.10 | No fix listed |
| pypi trytond(PyPI) | = 1.8.11 | No fix listed |
| pypi trytond(PyPI) | = 1.8.2 | No fix listed |
| pypi trytond(PyPI) | = 1.8.3 | No fix listed |
| pypi trytond(PyPI) | = 1.8.4 | No fix listed |
| pypi trytond(PyPI) | = 1.8.5 | No fix listed |
| pypi trytond(PyPI) | = 1.8.6 | No fix listed |
| pypi trytond(PyPI) | = 1.8.7 | No fix listed |
| pypi trytond(PyPI) | = 1.8.8 | No fix listed |
| pypi trytond(PyPI) | = 1.8.9 | No fix listed |
| pypi trytond(PyPI) | = 2.0.0 | No fix listed |
| pypi trytond(PyPI) | = 2.0.1 | No fix listed |
| pypi trytond(PyPI) | = 2.0.10 | No fix listed |
| pypi trytond(PyPI) | = 2.0.11 | No fix listed |
| pypi trytond(PyPI) | = 2.0.12 | No fix listed |
| pypi trytond(PyPI) | = 2.0.13 | No fix listed |
| pypi trytond(PyPI) | = 2.0.2 | No fix listed |
| pypi trytond(PyPI) | = 2.0.3 | No fix listed |
| pypi trytond(PyPI) | = 2.0.4 | No fix listed |
| pypi trytond(PyPI) | = 2.0.5 | No fix listed |
| pypi trytond(PyPI) | = 2.0.6 | No fix listed |
| pypi trytond(PyPI) | = 2.0.7 | No fix listed |
| pypi trytond(PyPI) | = 2.0.8 | No fix listed |
| pypi trytond(PyPI) | = 2.0.9 | No fix listed |
| pypi trytond(PyPI) | = 2.2.0 | No fix listed |
| pypi trytond(PyPI) | = 2.2.1 | No fix listed |
| pypi trytond(PyPI) | = 2.2.10 | No fix listed |
| pypi trytond(PyPI) | = 2.2.11 | No fix listed |
| pypi trytond(PyPI) | = 2.2.12 | No fix listed |
| pypi trytond(PyPI) | = 2.2.13 | No fix listed |
| pypi trytond(PyPI) | = 2.2.14 | No fix listed |
| pypi trytond(PyPI) | = 2.2.2 | No fix listed |
| pypi trytond(PyPI) | = 2.2.3 | No fix listed |
| pypi trytond(PyPI) | = 2.2.4 | No fix listed |
| pypi trytond(PyPI) | = 2.2.5 | No fix listed |
| pypi trytond(PyPI) | = 2.2.6 | No fix listed |
| pypi trytond(PyPI) | = 2.2.7 | No fix listed |
| pypi trytond(PyPI) | = 2.2.8 | No fix listed |
| pypi trytond(PyPI) | = 2.2.9 | No fix listed |
| pypi trytond(PyPI) | = 2.4.0 | No fix listed |
| pypi trytond(PyPI) | = 2.4.1 | No fix listed |
| pypi trytond(PyPI) | = 2.4.10 | No fix listed |
| pypi trytond(PyPI) | = 2.4.11 | No fix listed |
| pypi trytond(PyPI) | = 2.4.12 | No fix listed |
| pypi trytond(PyPI) | = 2.4.13 | No fix listed |
| pypi trytond(PyPI) | = 2.4.14 | No fix listed |
| pypi trytond(PyPI) | = 2.4.15 | No fix listed |
| pypi trytond(PyPI) | = 2.4.16 | No fix listed |
| pypi trytond(PyPI) | = 2.4.2 | No fix listed |
| pypi trytond(PyPI) | = 2.4.3 | No fix listed |
| pypi trytond(PyPI) | = 2.4.4 | No fix listed |
| pypi trytond(PyPI) | = 2.4.5 | No fix listed |
| pypi trytond(PyPI) | = 2.4.6 | No fix listed |
| pypi trytond(PyPI) | = 2.4.7 | No fix listed |
| pypi trytond(PyPI) | = 2.4.8 | No fix listed |
| pypi trytond(PyPI) | = 2.4.9 | No fix listed |
| pypi trytond(PyPI) | = 2.6.0 | No fix listed |
| pypi trytond(PyPI) | = 2.6.1 | No fix listed |
| pypi trytond(PyPI) | = 2.6.10 | No fix listed |
| pypi trytond(PyPI) | = 2.6.11 | No fix listed |
| pypi trytond(PyPI) | = 2.6.12 | No fix listed |
| pypi trytond(PyPI) | = 2.6.13 | No fix listed |
| pypi trytond(PyPI) | = 2.6.14 | No fix listed |
| pypi trytond(PyPI) | = 2.6.15 | No fix listed |
| pypi trytond(PyPI) | = 2.6.16 | No fix listed |
| pypi trytond(PyPI) | = 2.6.17 | No fix listed |
| pypi trytond(PyPI) | = 2.6.18 | No fix listed |
| pypi trytond(PyPI) | = 2.6.2 | No fix listed |
| pypi trytond(PyPI) | = 2.6.3 | No fix listed |
| pypi trytond(PyPI) | = 2.6.4 | No fix listed |
| pypi trytond(PyPI) | = 2.6.5 | No fix listed |
| pypi trytond(PyPI) | = 2.6.6 | No fix listed |
| pypi trytond(PyPI) | = 2.6.7 | No fix listed |
| pypi trytond(PyPI) | = 2.6.8 | No fix listed |
| pypi trytond(PyPI) | = 2.6.9 | No fix listed |
| pypi trytond(PyPI) | = 2.8.0 | No fix listed |
| pypi trytond(PyPI) | = 2.8.1 | No fix listed |
| pypi trytond(PyPI) | = 2.8.10 | No fix listed |
| pypi trytond(PyPI) | = 2.8.11 | No fix listed |
| pypi trytond(PyPI) | = 2.8.12 | No fix listed |
| pypi trytond(PyPI) | = 2.8.13 | No fix listed |
| pypi trytond(PyPI) | = 2.8.14 | No fix listed |
| pypi trytond(PyPI) | = 2.8.15 | No fix listed |
| pypi trytond(PyPI) | = 2.8.16 | No fix listed |
| pypi trytond(PyPI) | = 2.8.2 | No fix listed |
| pypi trytond(PyPI) | = 2.8.3 | No fix listed |
| pypi trytond(PyPI) | = 2.8.4 | No fix listed |
| pypi trytond(PyPI) | = 2.8.5 | No fix listed |
| pypi trytond(PyPI) | = 2.8.6 | No fix listed |
| pypi trytond(PyPI) | = 2.8.7 | No fix listed |
| pypi trytond(PyPI) | = 2.8.8 | No fix listed |
| pypi trytond(PyPI) | = 2.8.9 | No fix listed |
| pypi trytond(PyPI) | = 3.0.0 | No fix listed |
| pypi trytond(PyPI) | = 3.0.1 | No fix listed |
| pypi trytond(PyPI) | = 3.0.10 | No fix listed |
| pypi trytond(PyPI) | = 3.0.11 | No fix listed |
| pypi trytond(PyPI) | = 3.0.12 | No fix listed |
| pypi trytond(PyPI) | = 3.0.13 | No fix listed |
| pypi trytond(PyPI) | = 3.0.14 | No fix listed |
| pypi trytond(PyPI) | = 3.0.15 | No fix listed |
| pypi trytond(PyPI) | = 3.0.16 | No fix listed |
| pypi trytond(PyPI) | = 3.0.17 | No fix listed |
| pypi trytond(PyPI) | = 3.0.2 | No fix listed |
| pypi trytond(PyPI) | = 3.0.3 | No fix listed |
| pypi trytond(PyPI) | = 3.0.4 | No fix listed |
| pypi trytond(PyPI) | = 3.0.5 | No fix listed |
| pypi trytond(PyPI) | = 3.0.6 | No fix listed |
| pypi trytond(PyPI) | = 3.0.7 | No fix listed |
| pypi trytond(PyPI) | = 3.0.8 | No fix listed |
| pypi trytond(PyPI) | = 3.0.9 | No fix listed |
| pypi trytond(PyPI) | = 3.2.0 | No fix listed |
| pypi trytond(PyPI) | = 3.2.1 | No fix listed |
| pypi trytond(PyPI) | = 3.2.10 | No fix listed |
| pypi trytond(PyPI) | = 3.2.11 | No fix listed |
| pypi trytond(PyPI) | = 3.2.12 | No fix listed |
| pypi trytond(PyPI) | = 3.2.13 | No fix listed |
| pypi trytond(PyPI) | = 3.2.14 | No fix listed |
| pypi trytond(PyPI) | = 3.2.15 | No fix listed |
| pypi trytond(PyPI) | = 3.2.16 | No fix listed |
| pypi trytond(PyPI) | = 3.2.2 | No fix listed |
| pypi trytond(PyPI) | = 3.2.3 | No fix listed |
| pypi trytond(PyPI) | = 3.2.4 | No fix listed |
| pypi trytond(PyPI) | = 3.2.5 | No fix listed |
| pypi trytond(PyPI) | = 3.2.6 | No fix listed |
| pypi trytond(PyPI) | = 3.2.7 | No fix listed |
| pypi trytond(PyPI) | = 3.2.8 | No fix listed |
| pypi trytond(PyPI) | = 3.2.9 | No fix listed |
| pypi trytond(PyPI) | >= 3.4, < 3.4.14 | 3.4.14 |
| pypi trytond(PyPI) | = 3.4.0 | No fix listed |
| pypi trytond(PyPI) | = 3.4.1 | No fix listed |
| pypi trytond(PyPI) | = 3.4.10 | No fix listed |
| pypi trytond(PyPI) | = 3.4.11 | No fix listed |
| pypi trytond(PyPI) | = 3.4.12 | No fix listed |
| pypi trytond(PyPI) | = 3.4.13 | No fix listed |
| pypi trytond(PyPI) | = 3.4.2 | No fix listed |
| pypi trytond(PyPI) | = 3.4.3 | No fix listed |
| pypi trytond(PyPI) | = 3.4.4 | No fix listed |
| pypi trytond(PyPI) | = 3.4.5 | No fix listed |
| pypi trytond(PyPI) | = 3.4.6 | No fix listed |
| pypi trytond(PyPI) | = 3.4.7 | No fix listed |
| pypi trytond(PyPI) | = 3.4.8 | No fix listed |
| pypi trytond(PyPI) | = 3.4.9 | No fix listed |
| pypi trytond(PyPI) | >= 3.6, < 3.6.12 | 3.6.12 |
| pypi trytond(PyPI) | = 3.6.0 | No fix listed |
| pypi trytond(PyPI) | = 3.6.1 | No fix listed |
| pypi trytond(PyPI) | = 3.6.10 | No fix listed |
| pypi trytond(PyPI) | = 3.6.11 | No fix listed |
| pypi trytond(PyPI) | = 3.6.2 | No fix listed |
| pypi trytond(PyPI) | = 3.6.3 | No fix listed |
| pypi trytond(PyPI) | = 3.6.4 | No fix listed |
| pypi trytond(PyPI) | = 3.6.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugs.tryton.org issue-tracking
- github.com
- github.com
- github.com product
- DSA-3656 third-party-advisory vendor-advisory
- www.tryton.org vendor-advisory
- github.com vendor-advisory
- Debian Security Tracker CVE-2016-1242 vendor-advisory