Vulnerability in Plone

CVE-2006-4247

Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."

EPSS: 0.010 (59.4th percentile) — read the EPSS interpretation.

Affected products

  • Plone — versions 2.5, 2.5.1_rc
  • N/a — versions n/a

References