Описание
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| zope-cmfplone | not-affected | sarge | package | |
| zope-cmfplone | fixed | 2.5.1-1 | package |
Связанные уязвимости
ubuntu
почти 20 лет назад
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
nvd
почти 20 лет назад
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
CVSS3: 9.1
github
больше 4 лет назад
Plone allows anonymous users to reset any users password through the web via Password Reset Tool