Security Advisory
CVE-2012-5507
4.3
Vulnerability Description
AccessControl/AuthEncoding.py in Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain passwords via vectors involving timing discrepancies in password validation.
Published Date
September 30, 2014
Official Source
NIST NVD Advisory