blog.pivotx.netConfirmation
http://blog.pivotx.net/2011-02-16/pivotx-225-released CVE-2011-1035
PivotX before 2.2.4 Password Reset Security Bypass
Record summary
CVE-2011-1035 has a selected CVSS score of 7.5.
Description
The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Feb 18, 2011 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
pivotxBrowse pivotx / pivotx | VulnCheck | Version data not supplied | |
References
11forum.pivotx.netConfirmation
http://forum.pivotx.net/viewtopic.php?f=2&t=1961 forum.pivotx.netConfirmation
http://forum.pivotx.net/viewtopic.php?f=2&t=1967 forum.pivotx.net
http://forum.pivotx.net/viewtopic.php?p=10639 70935vdb entry
http://osvdb.org/70935 43417Third-party advisory
http://secunia.com/advisories/43417 VU#175068Third-party advisory
http://www.kb.cert.org/vuls/id/175068 46463vdb entry
http://www.securityfocus.com/bid/46463 ADV-2011-0445vdb entry
http://www.vupen.com/english/advisories/2011/0445 pivotx-resetpassword-security-bypass(65539)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/65539 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2011-1035