First published: Fri Jan 04 2008(Updated: )
2z project 0.9.6.1 allows attackers to change the password without supplying the old password.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Array-tools | =0.9.6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-6661 is considered a high severity vulnerability due to its ability to allow unauthorized password changes.
CVE-2007-6661 allows attackers to change user passwords without needing the old password, compromising account security.
To fix CVE-2007-6661, it is recommended to upgrade to a secure version of the 2z project that addresses this vulnerability.
CVE-2007-6661 specifically affects version 0.9.6.1 of the 2z project.
Anyone using the 2z project version 0.9.6.1 is at risk of the vulnerability described in CVE-2007-6661.