Joomla! Password Reset Administrative Access Security Bypass Vulnerability
BID:45628
Info
Joomla! Password Reset Administrative Access Security Bypass Vulnerability
| Bugtraq ID: | 45628 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 30 2010 12:00AM |
| Updated: | Dec 30 2010 12:00AM |
| Credit: | greg |
| Vulnerable: |
SocialMPN SocialMPN 1.0.5 Joomla Joomla! 1.5.20 Joomla Joomla! 1.5.19 Joomla Joomla! 1.5.18 Joomla Joomla! 1.5.17 Joomla Joomla! 1.5.16 Joomla Joomla! 1.5.15 Joomla Joomla! 1.5.14 Joomla Joomla! 1.5.12 Joomla Joomla! 1.5.11 Joomla Joomla! 1.5.10 Joomla Joomla! 1.5.9 Joomla Joomla! 1.5.8 Joomla Joomla! 1.5.7 Joomla Joomla! 1.5.5 Joomla Joomla! 1.5.4 Joomla Joomla! 1.5.2 Joomla Joomla! 1.5.1 Joomla Joomla! 1.5.6 Joomla Joomla! 1.5.3 Joomla Joomla! 1.5.15 Rc Joomla Joomla! 1.5.13 Joomla Joomla! 1.5.0 Joomla Joomla! 0 Joomla Joomla 1.5.22 Joomla Joomla 1.5.21 Joomla Joomla 1.5.20 Joomla Joomla 1.5.19 Joomla Joomla 1.5.18 Joomla Joomla 1.5.17 Joomla Joomla 1.5.16 Joomla Joomla 1.5.15 Joomla Joomla 1.5.14 Joomla Joomla 1.5.13 Joomla Joomla 1.5.12 Joomla Joomla 1.5.11 Joomla Joomla 1.5.10 Joomla Joomla 1.5.9 Joomla Joomla 1.5.8 Joomla Joomla 1.5.7 Joomla Joomla 1.5.6 Joomla Joomla 1.5.5 Joomla Joomla 1.5.4 Joomla Joomla 1.5.3 Joomla Joomla 1.5.2 Joomla Joomla 1.5.1 Joomla Joomla 1.5 Joomla Joomla 1.0.15 Joomla Joomla 1.0.14 Joomla Joomla 1.0.13 Joomla Joomla 1.0.12 Joomla Joomla 1.0.11 Joomla Joomla 1.0.10 Joomla Joomla 1.0.9 Joomla Joomla 1.0.8 Joomla Joomla 1.0.7 Joomla Joomla 1.0.4 Joomla Joomla 1.0.3 Joomla Joomla 1.0.2 Joomla Joomla 1.0.1 Joomla Joomla 1.0 Joomla Joomla 1.5.0 Beta Joomla Joomla 1.5 RC3 Joomla Joomla 1.5 RC2 Joomla Joomla 1.5 RC1 Joomla Joomla 1.5 Beta 2 Joomla Joomla 1.0.15 RC4 |
| Not Vulnerable: | |
Discussion
Joomla! Password Reset Administrative Access Security Bypass Vulnerability
Joomla! is prone to a security-bypass vulnerability because of low entropy in the PRNG seed.
A successful exploit may allow attackers to obtain administrator credentials which can lead to further attacks.
Currently, affected Joomla! versions are not known. We will update this BID when further details emerge.
Joomla! is prone to a security-bypass vulnerability because of low entropy in the PRNG seed.
A successful exploit may allow attackers to obtain administrator credentials which can lead to further attacks.
Currently, affected Joomla! versions are not known. We will update this BID when further details emerge.
Exploit / POC
Joomla! Password Reset Administrative Access Security Bypass Vulnerability
Attackers can use readily available tools to exploit this issue.
The reporter has demonstrated a proof-of-concept to exploit this issue; please see the references for more information.
Attackers can use readily available tools to exploit this issue.
The reporter has demonstrated a proof-of-concept to exploit this issue; please see the references for more information.
Solution / Fix
Joomla! Password Reset Administrative Access Security Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Joomla! Password Reset Administrative Access Security Bypass Vulnerability
References:
References:
- Joomla! Homepage (Joomla!)
- Non-Obvious Bugs By Example (greg)