CVE-2017-8342

High

Published: 30/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to data breaches or other serious security incidents.

Recommendation

It is recommended to upgrade Radicale to version 1.1.2 or 2.0.0rc2 or later to mitigate the risks associated with these vulnerabilities.

Other vulnerabilities in Radicale

CVE-2016-1505Critical
The filesystem storage backend in Radicale before version 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path.

Original NVD description (English source)

Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.