GitHub Advisoryadvisory · Maven

GHSA-h6jq-w432-j26w Silverpeas vulnerable to password complexity rule bypass

LOW Published 2024-08-16 Modified 2024-08-19 Official page ↗
Aliases
CVE-2024-42850
Ecosystem
Maven
Packages
org.silverpeas.core:silverpeas-core
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-521
Reviewed
2024-08-19

Affected packages

• Maven org.silverpeas.core:silverpeas-core: <= 6.4.2 (no fix yet)

Description

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

Related

Alias · CVE (1)

  • CVE-2024-42850 An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements. vulnerability

Weakness · CWE (1)

  • CWE-521 Weak Password Requirements weakness

References