Description
The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.
References
- http://forum.pivotx.net/viewtopic.php?f=2&t=1961
- pivotx-resetpassword-security-bypass(65539) vdb-entry
- http://forum.pivotx.net/viewtopic.php?p=10639#p10639
- ADV-2011-0445 vdb-entry
- 43417 third-party-advisory
- 70935 vdb-entry
- 46463 vdb-entry
- VU#175068 third-party-advisory
- http://forum.pivotx.net/viewtopic.php?f=2&t=1967
- http://blog.pivotx.net/2011-02-16/pivotx-225-released