CVE-2012-5508 in Plone
Summary
The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG reseeding issue in Zope.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
10/24/2012
Disclosure
11/03/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 72785 | Plone Password Reset information disclosure | 200 | Not defined | Official fix | CVE-2012-5508 |