PT-2020-7189 · Joomla · Joomla!

Aggelos Kiayias + 1 · Published 2020-01-15 · Updated 2020-01-22 · CVE-2012-1562

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! core versions prior to 2.5.3

Description The issue allows for unauthorized password changes.

Recommendations For versions prior to 2.5.3, update to version 2.5.3 or later to resolve the issue.

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2012-1562

Affected Products

Joomla!

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-1562 · Security Note
• https://developer.joomla.org/security/news/394-20120304-core-password-change.html · Vendor Advisory
• https://t.me/cibsecurity/9200 · Telegram Post
• http://openwall.com/lists/oss-security/2012/03/19/11 · Note