Plone · Plone · CVE-2012-5508
**Name of the Vulnerable Software and Affected Versions**
Plone versions prior to 4.2.3
Plone versions 4.3 prior to beta 1
**Description**
The issue allows remote attackers to obtain random numbers and derive the PRNG state for password resets. This could potentially be used to gain unauthorized access.
**Recommendations**
For Plone versions prior to 4.2.3, update to version 4.2.3 or later.
For Plone versions 4.3 prior to beta 1, update to beta 1 or later.