Description

The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.

Remediation

References

CVE-2011-4321

Related Vulnerabilities

Drupal Improper Authentication Vulnerability (CVE-2010-3091)

Joomla! Core 2.5.x Denial of Service (2.5.4 - 2.5.25)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44948)

WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.12)

MySQL CVE-2015-0385 Vulnerability (CVE-2015-0385)

Severity

Medium

Classification

CVE-2011-4321

Tags

Missing Update Known Vulnerabilities