CVE-2011-4321: Medium severity joomla vulnerability
Published Nov 23, 2011
·Updated
The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.
Affected Software
26 affected components
Joomla Joomla\!=1.5.24
Joomla Joomla\!=1.5.11
Joomla Joomla\!=1.5.13
Joomla Joomla\!=1.5.3
Joomla Joomla\!=1.5.2
Joomla Joomla\!=1.5.22
Joomla Joomla\!=1.5.9
Joomla Joomla\!=1.5.18
Joomla Joomla\!=1.5.16
Joomla Joomla\!=1.5.4
Joomla Joomla\!=1.5.10
Joomla Joomla\!=1.5.7
Joomla Joomla\!=1.5.0
Joomla Joomla\!=1.5.15
Joomla Joomla\!=1.5.6
Joomla Joomla\!=1.5.1
Joomla Joomla\!=1.5.23
Joomla Joomla\!=1.5.17
Joomla Joomla\!=1.5.8
Joomla Joomla\!=1.5.19
Joomla Joomla\!=1.5.21
Joomla Joomla\!=1.5.12
Joomla Joomla\!=1.5.5
Joomla Joomla\!=1.5.20
Joomla Joomla\!=1.5.15-rc
Joomla Joomla\!=1.5.14
Event History
Nov 23, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4321?
CVE-2011-4321 is considered to have a medium severity level due to its potential to allow attackers to change passwords.
2
How do I fix CVE-2011-4321?
To fix CVE-2011-4321, upgrade Joomla! to the latest version beyond 1.5.24, as this vulnerability has been addressed in subsequent releases.
3
Which versions of Joomla! are affected by CVE-2011-4321?
CVE-2011-4321 affects Joomla! versions 1.5.0 through 1.5.24.
4
What kind of attack does CVE-2011-4321 enable?
CVE-2011-4321 enables attackers to change the passwords of arbitrary users using weak random number generation.
5
Is there a workaround for CVE-2011-4321 prior to applying the fix?
There are no effective workarounds for CVE-2011-4321; upgrading to a patched version is the recommended action.