Plone CMS Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2012-5507 - Vulnerability Database

Plone CMS

Plone CMS Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2012-5507

Medium

Reference: CVE-2012-5507

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2012-5507

Title: Plone CMS Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability

Overview:

AccessControl/AuthEncoding.py in Zope before 2.13.19 as used in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.