Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2006-4247
cve-2006-4247
password reset tool
plone
vulnerability
security declaration
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to “an erroneous security declaration.”
Affected configurations
Node
ploneploneMatch2.5
ORploneploneMatch2.5.1_rc
| CPE | Name | Operator | Version |
|---|---|---|---|
| plone:plone | plone | eq | 2.5 |
| plone:plone | plone | eq | 2.5.1_rc |
Related
ubuntucve
ubuntucve
CVE-2006-4247
2006-09-29 00:00:00
nvd
nvd
CVE-2006-4247
2006-09-29 19:07:00
github
github
cvelist
cvelist
CVE-2006-4247
2022-10-03 16:21:30
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
Related for CVE-2006-4247