Description

TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.

Remediation

References

CVE-2010-3670

Related Vulnerabilities

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.30)

Oracle JRE CVE-2012-0547 Vulnerability (CVE-2012-0547)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Multiple Vulnerabilities (4.5.0.1)

WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)

Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8156)

Severity

Medium

Classification

CVE-2010-3670 CWE-326 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities