CVE-2012-5508

🗓️ 03 Nov 2014 22:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 70 Views

Plone 4.2.3 and 4.3 error pages allow remote attackers to obtain random numbers and derive PRNG state

Reporter	Title	Published	Views	Family All 12
Cvelist	CVE-2012-5508	3 Nov 201422:00	–	cvelist
EUVD	EUVD-2014-0068	7 Oct 202500:30	–	euvd
Github Security Blog	Exposure of Sensitive Information in Plone	17 May 202204:30	–	github
NVD	CVE-2012-5508	3 Nov 201422:55	–	nvd
OSV	GHSA-WPRR-MC54-C62Q Exposure of Sensitive Information in Plone	17 May 202204:30	–	osv
OSV	PYSEC-2014-50	3 Nov 201422:55	–	osv
Prion	Design/Logic Flaw	3 Nov 201422:55	–	prion
Prion	Code injection	3 Nov 201422:55	–	prion
Positive Technologies	PT-2014-2335 · Plone · Plone	3 Nov 201400:00	–	ptsecurity
PyPA	PYSEC-2014-50	3 Nov 201422:55	–	pypa

NVD

Node

plone ploneRange≤4.2.2

OR

plone ploneMatch1.0

OR

plone ploneMatch1.0.1

OR

plone ploneMatch1.0.2

OR

plone ploneMatch1.0.3

OR

plone ploneMatch1.0.4

OR

plone ploneMatch1.0.5

OR

plone ploneMatch1.0.6

OR

plone ploneMatch2.0

OR

plone ploneMatch2.0.1

OR

plone ploneMatch2.0.2

OR

plone ploneMatch2.0.3

OR

plone ploneMatch2.0.4

OR

plone ploneMatch2.0.5

OR

plone ploneMatch2.1

OR

plone ploneMatch2.1.1

OR

plone ploneMatch2.1.2

OR

plone ploneMatch2.1.3

OR

plone ploneMatch2.1.4

OR

plone ploneMatch2.5

OR

plone ploneMatch2.5.1

OR

plone ploneMatch2.5.2

OR

plone ploneMatch2.5.3

OR

plone ploneMatch2.5.4

OR

plone ploneMatch2.5.5

OR

plone ploneMatch3.0

OR

plone ploneMatch3.0.1

OR

plone ploneMatch3.0.2

OR

plone ploneMatch3.0.3

OR

plone ploneMatch3.0.4

OR

plone ploneMatch3.0.5

OR

plone ploneMatch3.0.6

OR

plone ploneMatch3.1

OR

plone ploneMatch3.1.1

OR

plone ploneMatch3.1.2

OR

plone ploneMatch3.1.3

OR

plone ploneMatch3.1.4

OR

plone ploneMatch3.1.5.1

OR

plone ploneMatch3.1.6

OR

plone ploneMatch3.1.7

OR

plone ploneMatch3.2

OR

plone ploneMatch3.2.1

OR

plone ploneMatch3.2.2

OR

plone ploneMatch3.2.3

OR

plone ploneMatch3.3

OR

plone ploneMatch3.3.1

OR

plone ploneMatch3.3.2

OR

plone ploneMatch3.3.3

OR

plone ploneMatch3.3.4

OR

plone ploneMatch3.3.5

OR

plone ploneMatch4.0

OR

plone ploneMatch4.0.1

OR

plone ploneMatch4.0.2

OR

plone ploneMatch4.0.3

OR

plone ploneMatch4.0.4

OR

plone ploneMatch4.0.5

OR

plone ploneMatch4.0.6.1

OR

plone ploneMatch4.1

OR

plone ploneMatch4.1.4

OR

plone ploneMatch4.1.5

OR

plone ploneMatch4.1.6

OR

plone ploneMatch4.2

OR

plone ploneMatch4.2.1

OR

plone ploneMatch4.3

Source	Link
plone	www.plone.org/products/plone-hotfix/releases/20121124
github	www.github.com/plone/Products.CMFPlone/blob/4.2.3/docs/CHANGES.txt
openwall	www.openwall.com/lists/oss-security/2012/11/10/1
bugs	www.bugs.launchpad.net/zope2/+bug/1071067
plone	www.plone.org/products/plone/security/advisories/20121106/24

06 May 2026 22:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

EPSS0.00357

plone error pages remote attackers random numbers prng password resets vulnerability cve-2012-5508 nvd