CVE-2012-5618

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

Default credentials

Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens...

CVE-2012-5618

CVE-2012-5618 affects Ushahidi prior to 2.6.1, where forgot-password tokens use insufficient entropy. This vulnerability could allow token guessing and account compromise with network access. Upgrade to Ushahidi 2.6.1 or later as the implied fix; the connected documents do not provide further exp...