CVE-2012-1581

Published: Sep 9, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 uses weak random numbers for password reset tokens, which makes it easier for remote attackers to change the passwords of arbitrary users.

Affected (11)

Products: Mediawiki: Mediawiki

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.17.0
Mediawiki Mediawiki	Version 1.17.0 rc1
Mediawiki Mediawiki	Version 1.17.1
Mediawiki Mediawiki	Version 1.17.2
Mediawiki Mediawiki	Version 1.17
Mediawiki Mediawiki	Version 1.17 beta_1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Mediawiki Mediawiki	Version 1.18.0
Mediawiki Mediawiki	Version 1.18.0 rc1
Mediawiki Mediawiki	Version 1.18.1
Mediawiki Mediawiki	Version 1.18
Mediawiki Mediawiki	Version 1.18 beta_1

Related CWEs

References (16)

http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/48504

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/22/9

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/03/24/1

Source: secalert@redhat.com

http://www.securityfocus.com/bid/52689

Source: secalert@redhat.com

https://bugzilla.wikimedia.org/show_bug.cgi?id=35078

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/78910

Source: secalert@redhat.com

http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000109.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.wikimedia.org/pipermail/mediawiki-announce/2012-March/000110.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/48504

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/03/22/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/03/24/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/52689

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.wikimedia.org/show_bug.cgi?id=35078

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/78910

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.