CVE-2017-8342
Description
Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.
Risk Information
Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.726
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2017-8342 are fixed in Python-radicale 1.1.2 | Windows |
| Vulnerabilities CVE-2017-8342 are fixed in Python-radicale 2.0.0rc2 | Windows |
| Vulnerabilities CVE-2017-8342 are fixed in Python-radicale for linux 1.1.2 | Linux |
| Vulnerabilities CVE-2017-8342 are fixed in Python-radicale for linux 2.0.0rc2 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234