CVE-2020-7940 in Plone

Résumé

par MITRE

Missing password strength checks on some forms in Plone 4.3 through 5.2.0 allow users to set weak passwords, leading to easier cracking.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 23/01/2020
• Modérer: accepté
• Entrée: VDB-149308
• CPE: prêt
• CWE: CWE-521 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.01255
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7940
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7940
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7940/