PT-2017-12723 · Silverstripe · Silverstripe Cms
CVE-2017-12849
·
Publicado
2017-10-12
·
Atualizado
2025-04-10
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
SilverStripe CMS versions prior to 3.5.5
SilverStripe CMS versions 3.6.x prior to 3.6.1
Description
The issue allows remote attackers to enumerate users via timing attacks due to response discrepancy in the login and password reset forms.
Recommendations
For versions prior to 3.5.5, update to version 3.5.5 or later.
For versions 3.6.x prior to 3.6.1, update to version 3.6.1 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Silverstripe Cms