CVE-2012-5544

2022-10-0316:15:30

redhat

www.cve.org

mandrill

drupal

password reset

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard.

References

drupal.org/node/1807894

drupal.org/node/1808846

www.openwall.com/lists/oss-security/2012/11/20/4