PT-2012-57 · 1с · 1С-Битрикс

Publicado

2012-09-03

·

Atualizado

2012-09-03

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions 1С-Битрикс: Управление сайтом (affected versions not specified)
Description The issue is related to errors in the mt rand pseudorandom number generator code. It allows a remote attacker to obtain the password reset confirmation code for any user and potentially the user's password.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-338

Identificadores relacionados

BDU:2014-00403

Produtos afetados

1С-Битрикс