CVE-2012-1581: Medium severity MediaWiki MediaWiki vulnerability
Published Sep 9, 2012
·Updated
MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.
Affected Software
11 affected components
MediaWiki MediaWiki=1.17
MediaWiki MediaWiki=1.17-beta_1
MediaWiki MediaWiki=1.17.0
MediaWiki MediaWiki=1.17.0-rc1
MediaWiki MediaWiki=1.17.1
MediaWiki MediaWiki=1.17.2
MediaWiki MediaWiki=1.18
MediaWiki MediaWiki=1.18-beta_1
MediaWiki MediaWiki=1.18.0
MediaWiki MediaWiki=1.18.0-rc1
MediaWiki MediaWiki=1.18.1
Event History
Sep 9, 2012
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-1581?
CVE-2012-1581 is considered a moderate severity vulnerability as it allows attackers to change passwords of arbitrary users.
2
How do I fix CVE-2012-1581?
To fix CVE-2012-1581, upgrade MediaWiki to version 1.17.3 or 1.18.2 or later.
3
What versions of MediaWiki are affected by CVE-2012-1581?
CVE-2012-1581 affects MediaWiki versions 1.17.x before 1.17.3 and 1.18.x before 1.18.2.
4
Can CVE-2012-1581 be exploited remotely?
Yes, CVE-2012-1581 can be exploited remotely to change user passwords.
5
What impact does CVE-2012-1581 have on user accounts?
CVE-2012-1581 compromises the integrity of user accounts by allowing unauthorized password resets.