CVE-2011-2082

NONECVSS 0.0

0.0

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords after accounts are re-enabled, via a brute-force attack on the database. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-0009.

🔗 References (10)

cve@mitrehttp://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
cve@mitrehttp://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
cve@mitrehttp://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
cve@mitrehttp://secunia.com/advisories/49259
cve@mitrehttp://www.securityfocus.com/bid/53660
af854a3a-2127-422b-91ae-364da2661108http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html
af854a3a-2127-422b-91ae-364da2661108http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html
af854a3a-2127-422b-91ae-364da2661108http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/49259
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/53660

Is Your Infrastructure Affected by CVE-2011-2082?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2011-2082

📅 Published

🔄 Last Modified

🔗 References (10)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2011-2082?