CVE-2010-5090

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.

Score

CVSS 2.0 4.0 Medium

Status

Modified - secalert@redhat.com

Published

2012-08-26

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Silverstripe (Silverstripe)

References

• http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
• http://www.openwall.com/lists/oss-security/2012/04/30/1
• http://www.openwall.com/lists/oss-security/2012/04/30/3
• http://www.openwall.com/lists/oss-security/2012/05/01/3