VYPR
← All advisories
High severity8.1NVD Advisory· Published Apr 30, 2017· Updated Jun 17, 2026

CVE-2017-8342

CVE-2017-8342

Description

Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
RadicalePyPI
< 1.1.21.1.2
RadicalePyPI
>= 2.0.0rc1, < 2.0.0rc22.0.0rc2

Affected products

3
  • Radicale/Radicale2 versions
    cpe:2.3:a:radicale:radicale:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:radicale:radicale:*:*:*:*:*:*:*:*range: <=1.1.1
    • cpe:2.3:a:radicale:radicale:2.0.0:rc1:*:*:*:*:*:*
  • ghsa-coords
    pkg:pypi/radicale
    Range: < 1.1.2

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.