CVEvulnerability
CVE-2012-1581
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.
Affected configurations
• mediawiki mediawiki 1.17
• mediawiki mediawiki 1.17.0
• mediawiki mediawiki 1.17.1
• mediawiki mediawiki 1.17.2
• mediawiki mediawiki 1.18
• mediawiki mediawiki 1.18.0
• mediawiki mediawiki 1.18.1
Related
Weakness · not in database (1)
References
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html Vendor Advisory
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html Vendor Advisory
- http://secunia.com/advisories/48504 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/03/22/9 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/24/1 www.openwall.com
- http://www.securityfocus.com/bid/52689 www.securityfocus.com
- https://bugzilla.wikimedia.org/show_bug.cgi?id=35078 bugzilla.wikimedia.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78910 exchange.xforce.ibmcloud.com
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html Vendor Advisory
- http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html Vendor Advisory
- http://secunia.com/advisories/48504 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/03/22/9 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/03/24/1 www.openwall.com
- http://www.securityfocus.com/bid/52689 www.securityfocus.com
- https://bugzilla.wikimedia.org/show_bug.cgi?id=35078 bugzilla.wikimedia.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78910 exchange.xforce.ibmcloud.com