PT-2011-4930 · Open Source Matters · Joomla!

Hanno Böck · Publicado 2011-11-23 · Atualizado 2011-11-28 · CVE-2011-4321

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.x through 1.5.24

Description The password reset functionality uses weak random numbers, making it easier for remote attackers to change the passwords of arbitrary users.

Recommendations For versions 1.5.x through 1.5.24, update to a version that addresses the weak random number issue in the password reset functionality.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2011-4321

Produtos afetados

Joomla!

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4321 · Nota
• http://developer.joomla.org/security/news/9-security/10-core-security/375-20111103-core-password-change · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4321 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/11/21/1 · Nota