Description

The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.

Remediation

References

CVE-2011-4321

Related Vulnerabilities

WordPress Plugin Sucuri Security-Auditing, Malware Scanner and Security Hardening Cross-Site Scripting (1.7.15)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2141)

WordPress Plugin WP Bannerize 'ajax_sorter.php' SQL Injection (2.8.7)

WordPress Plugin All Video Gallery 'vid' Parameter Multiple SQL Injection Vulnerabilities (1.1)

WordPress 'wp-db.php' Character Set SQL Injection Vulnerability (2.0 - 2.3.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2011-4321