CVE-2012-3798

Janrain Capture 6.x-1.0 and 7.x-1.0 - Exposure of Sensitive Information via Password Generation

Title source: llm
STIX 2.1

Description

The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to conduct brute force password guessing attacks.

References (4)

Core 4
Core References
Patch x_refsource_misc
http://drupal.org/node/1632702
Patch, Vendor Advisory x_refsource_misc
http://drupal.org/node/1632734
Patch x_refsource_misc
http://drupal.org/node/1632704
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/82957

Scores

EPSS 0.0152
EPSS Percentile 71.5%

Details

CWE
CWE-200
Status published
Products (2)
bryce_hamrick/janrain_capture 6.x-1.0
bryce_hamrick/janrain_capture 7.x-1.0
Published Jun 27, 2012
Tracked Since Feb 18, 2026