CVE-2017-0360

Published: Apr 4, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.

Affected (99)

Products: Tryton: Tryton

Tryton

1 product

Tryton

Configuration A

86 vulnerable

Vulnerable Software	Affected Versions
Tryton Tryton	Version 3.0.0
Tryton Tryton	Version 3.0.10
Tryton Tryton	Version 3.0.11
Tryton Tryton	Version 3.0.12
Tryton Tryton	Version 3.0.13
Tryton Tryton	Version 3.0.14
Tryton Tryton	Version 3.0.15
Tryton Tryton	Version 3.0.16
Tryton Tryton	Version 3.0.17
Tryton Tryton	Version 3.0.1
Tryton Tryton	Version 3.0.2
Tryton Tryton	Version 3.0.3
Tryton Tryton	Version 3.0.4
Tryton Tryton	Version 3.0.5
Tryton Tryton	Version 3.0.6
Tryton Tryton	Version 3.0.7
Tryton Tryton	Version 3.0.8
Tryton Tryton	Version 3.0.9
Tryton Tryton	Version 3.2.0
Tryton Tryton	Version 3.2.10
Tryton Tryton	Version 3.2.11
Tryton Tryton	Version 3.2.12
Tryton Tryton	Version 3.2.13
Tryton Tryton	Version 3.2.14
Tryton Tryton	Version 3.2.15
Tryton Tryton	Version 3.2.16
Tryton Tryton	Version 3.2.17
Tryton Tryton	Version 3.2.1
Tryton Tryton	Version 3.2.2
Tryton Tryton	Version 3.2.3
Tryton Tryton	Version 3.2.4
Tryton Tryton	Version 3.2.5
Tryton Tryton	Version 3.2.6
Tryton Tryton	Version 3.2.7
Tryton Tryton	Version 3.2.8
Tryton Tryton	Version 3.2.9
Tryton Tryton	Version 3.4.0
Tryton Tryton	Version 3.4.10
Tryton Tryton	Version 3.4.11
Tryton Tryton	Version 3.4.12
Tryton Tryton	Version 3.4.13
Tryton Tryton	Version 3.4.14
Tryton Tryton	Version 3.4.15
Tryton Tryton	Version 3.4.16
Tryton Tryton	Version 3.4.17
Tryton Tryton	Version 3.4.1
Tryton Tryton	Version 3.4.2
Tryton Tryton	Version 3.4.3
Tryton Tryton	Version 3.4.4
Tryton Tryton	Version 3.4.5
Tryton Tryton	Version 3.4.6
Tryton Tryton	Version 3.4.7
Tryton Tryton	Version 3.4.8
Tryton Tryton	Version 3.4.9
Tryton Tryton	Version 3.6.0
Tryton Tryton	Version 3.6.10
Tryton Tryton	Version 3.6.11
Tryton Tryton	Version 3.6.12
Tryton Tryton	Version 3.6.13
Tryton Tryton	Version 3.6.14
Tryton Tryton	Version 3.6.15
Tryton Tryton	Version 3.6.16
Tryton Tryton	Version 3.6.1
Tryton Tryton	Version 3.6.2
Tryton Tryton	Version 3.6.3
Tryton Tryton	Version 3.6.4
Tryton Tryton	Version 3.6.5
Tryton Tryton	Version 3.6.6
Tryton Tryton	Version 3.6.7
Tryton Tryton	Version 3.6.8
Tryton Tryton	Version 3.6.9
Tryton Tryton	Version 3.8.0
Tryton Tryton	Version 3.8.10
Tryton Tryton	Version 3.8.11
Tryton Tryton	Version 3.8.12
Tryton Tryton	Version 3.8.13
Tryton Tryton	Version 3.8.14
Tryton Tryton	Version 3.8.1
Tryton Tryton	Version 3.8.2
Tryton Tryton	Version 3.8.3
Tryton Tryton	Version 3.8.4
Tryton Tryton	Version 3.8.5
Tryton Tryton	Version 3.8.6
Tryton Tryton	Version 3.8.7
Tryton Tryton	Version 3.8.8
Tryton Tryton	Version 3.8.9

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Tryton Tryton	Version 4.0.0
Tryton Tryton	Version 4.0.1
Tryton Tryton	Version 4.0.2
Tryton Tryton	Version 4.0.3
Tryton Tryton	Version 4.0.4
Tryton Tryton	Version 4.0.5
Tryton Tryton	Version 4.0.6
Tryton Tryton	Version 4.0.7
Tryton Tryton	Version 4.0.8
Tryton Tryton	Version 4.0.9
Tryton Tryton	Version 4.2.0
Tryton Tryton	Version 4.2.1
Tryton Tryton	Version 4.2.2