From e6c67188eaa05725ead6808b8d99d2b48dd2a161 Mon Sep 17 00:00:00 2001 From: delphij Date: Sun, 20 Feb 2011 05:04:28 +0000 Subject: Document PivotX administrator password reset vulnerability. --- security/vuxml/vuln.xml | 34 ++++++++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) (limited to 'security') diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index e675cc3e147..feec28fbd16 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,40 @@ Note: Please add new entries to the beginning of this file. --> + + PivotX -- administrator password reset vulnerability + + + pivotx + 2.2.4 + + + + +

US CERT reports:

+
PivotX contains a vulnerability that allows an + attacker to change the password of any account + just by guessing the username. Version 2.2.4 has + been reported to not be affected. + This vulnerability is being exploited in the wild + and users should immediately upgrade to 2.2.5 or + later. Mitigation steps for users that have been + compromised have been posted to the PivotX + Support Community.
+

+ + + + CVE-2011-1035 + + + 2011-02-18 + 2011-02-20 + + + tomcat -- Cross-site scripting vulnerability -- cgit