Use of Insufficiently Random Values
CVE-2012-1562
Summary
Joomla! core before 2.5.3 allows unauthorized password change.
- LOW
- NETWORK
- HIGH
- UNCHANGED
- NONE
- NONE
- NONE
- NONE
CWE-330 - Use of Insufficiently Random Values
The software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
References
Advisory Timeline
- Published