ID de Prueba:	1.3.6.1.4.1.25623.1.0.902343
Categoría:	Web application abuses
Título:	PivotX 'Reset my password' Feature Data Manipulation Vulnerability
Resumen:	PivotX is prone to data manipulation vulnerability.
Descripción:	Summary: PivotX is prone to data manipulation vulnerability. Vulnerability Insight: This issue is caused by an error in the 'Reset my password' feature, which could allow unauthenticated attackers to change the password of any account by guessing the username. Vulnerability Impact: Successful exploitation will allow remote attackers to gain privileges via unknown vectors. Affected Software/OS: PivotX version before 2.2.5 Solution: Upgrade to PivotX version 2.2.5 or later CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1035 BugTraq ID: 46463 http://www.securityfocus.com/bid/46463 CERT/CC vulnerability note: VU#175068 http://www.kb.cert.org/vuls/id/175068 http://forum.pivotx.net/viewtopic.php?p=10639#p10639 http://osvdb.org/70935 http://secunia.com/advisories/43417 http://www.vupen.com/english/advisories/2011/0445 XForce ISS Database: pivotx-resetpassword-security-bypass(65539) https://exchange.xforce.ibmcloud.com/vulnerabilities/65539
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.