CVE-2006-4247: Critical severity Plone plone vulnerability
Published Sep 29, 2006
·Updated
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
Affected Software
3 affected componentsFixes available
pip/Plone>=2.5<2.5.1
2.5.1
Plone plone=2.5
Plone plone=2.5.1_rc
Remediation
Patch Available
Event History
Sep 29, 2006
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:07 PM
RemedyDescriptionSeverityAffected Software
May 1, 2022
Advisory Published
via GitHub·07:16 AM
Frequently Asked Questions
1
What is the severity of CVE-2006-4247?
The severity of CVE-2006-4247 is considered critical due to the ability for attackers to reset passwords of other users.
2
How do I fix CVE-2006-4247?
To mitigate CVE-2006-4247, upgrade the Plone Password Reset Tool to version 2.5.1 or later.
3
What versions of Plone are affected by CVE-2006-4247?
CVE-2006-4247 affects Plone versions 2.5 and 2.5.1 Release Candidate.
4
What type of vulnerability is CVE-2006-4247?
CVE-2006-4247 is classified as an authentication vulnerability, allowing unauthorized password resets.
5
Can CVE-2006-4247 be exploited remotely?
Yes, CVE-2006-4247 can be exploited remotely by attackers with access to the Password Reset Tool.