{"cve":"CVE-2016-1241","nvd":{"published":"2016-09-07T19:28:00.127","modified":"2026-06-17T00:41:32.283","status":"Modified","description":"Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","score":5.3},"cwes":["CWE-200"],"references":["http://www.debian.org/security/2016/dsa-3656","http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html","https://bugs.tryton.org/issue5795","http://www.debian.org/security/2016/dsa-3656","http://www.tryton.org/posts/security-release-for-issue5795-and-issue5808.html"],"products":["tryton:tryton"],"source":"nvd","synced_at":"2026-10-19T20:40:10.783210791+00:00"},"epss":{"cve":"CVE-2016-1241","score":0.016,"percentile":0.75792,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-52j9-v3jc-9xgc","url":"https://osv.dev/vulnerability/GHSA-52j9-v3jc-9xgc","summary":"Tryton allows users to read the hashed password","modified":"2024-11-22T18:33:40.902064Z","packages":[{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":[">=3.0.0 <3.2.17"],"fixed":["3.2.17"]},{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":[">=3.4.0 <3.4.14"],"fixed":["3.4.14"]},{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":[">=3.8.0 <3.8.8"],"fixed":["3.8.8"]},{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":[">=3.6.0 <3.6.12"],"fixed":["3.6.12"]},{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":[">=4.0.0 <4.0.4"],"fixed":["4.0.4"]}]},{"id":"PYSEC-2016-12","url":"https://osv.dev/vulnerability/PYSEC-2016-12","summary":"","modified":"2026-06-10T17:02:46.272749185Z","packages":[{"ecosystem":"PyPI","name":"trytond","purl":"pkg:pypi/trytond","ranges":["<3.2.17",">=3.4 <3.4.14",">=3.6 <3.6.12",">=3.8 <3.8.8",">=4.0 <4.0.4"],"fixed":["3.2.17","3.4.14","3.6.12","3.8.8","4.0.4"]}]},{"id":"PYSEC-2016-40","url":"https://osv.dev/vulnerability/PYSEC-2016-40","summary":"","modified":"2024-11-21T14:56:56.112550Z","packages":[{"ecosystem":"PyPI","name":"tryton","purl":"pkg:pypi/tryton","ranges":["<3.2.17"],"fixed":["3.2.17"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}