Lucene search
GitHub Advisory DatabaseGHSA-5HCH-V5PQ-X4QPHistoryMay 01, 2022 - 7:16 a.m.
Plone allows anonymous users to reset any users password through the web via Password Reset Tool
2022-05-0107:16:48
GitHub Advisory Database
github.com
4
plone
password reset tool
vulnerability
security
software
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
58.0%
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to “an erroneous security declaration.”
Affected configurations
Node
ploneploneRange2.5–2.5.1
Related
cve
cve
CVE-2006-4247
2006-09-29 19:07:00
ubuntucve
ubuntucve
CVE-2006-4247
2006-09-29 00:00:00
cvelist
cvelist
CVE-2006-4247
2006-09-29 19:00:00
nvd
nvd
CVE-2006-4247
2006-09-29 19:07:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
58.0%
Related for GHSA-5HCH-V5PQ-X4QP