CVE-2016-1242

CVE-2016-1242 is a medium-severity vulnerability affecting multiple versions of the Tryton application (before 3.2.17, 3.4.14, 3.6.12, 3.8.8, and 4.0.4). This flaw allows remote authenticated users with specific permissions to read arbitrary files on the system through the 'file_open' function, primarily via the 'name' parameter. The vulnerability has a CVSSv3 score of 4.4, indicating a medium severity. It requires high privileges and high attack complexity, but successful exploitation could lead to high confidentiality impact by allowing unauthorized access to sensitive files. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE. Its EPSS score is very low, suggesting a minimal likelihood of exploitation.