CVE-2022-34530: Medium severity BackdropCMS Backdrop Cms vulnerability
Published Aug 1, 2022
·Updated
An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.
Affected Software
1 affected component
BackdropCMS Backdrop Cms<=1.22.0
Event History
Aug 1, 2022
CVE Published
via MITRE·07:24 PM
Data Sourced
via MITRE·07:24 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-34530.
2
What is the title of the vulnerability?
The title of the vulnerability is 'An issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers to e…'.
3
What is the severity of CVE-2022-34530?
The severity of CVE-2022-34530 is medium, with a severity value of 5.3.
4
How does CVE-2022-34530 affect Backdrop CMS?
CVE-2022-34530 affects Backdrop CMS v1.22.0.
5
How can the vulnerability be exploited?
The vulnerability can be exploited by attackers to enumerate usernames via password reset requests and distinct responses returned based on usernames.