CVE-2010-5090

Summary

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.

Impact & exploitability

AV:N/AC:L/Au:S/C:N/I:P/A:N

Affected products we track (1)

Recommendation

Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2
• http://www.openwall.com/lists/oss-security/2012/04/30/1
• http://www.openwall.com/lists/oss-security/2012/04/30/3
• http://www.openwall.com/lists/oss-security/2012/05/01/3