CVE-2010-5090

Description

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://www.openwall.com/lists/oss-security/2012/05/01/3 ↗
• http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 ↗
• http://www.openwall.com/lists/oss-security/2012/04/30/1 ↗
• http://www.openwall.com/lists/oss-security/2012/04/30/3 ↗