Description
Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ushahidi | Ushahidi | before 2.6.1 | — |
Unscored
CVE-2012-5618
EUVD-2012-5504GHSA-3q7m-4q8x-8gvg
Ushahidi before 2.6.1 has insufficient entropy for forgot-password tokens.
Published Feb 4, 2020 · Updated Aug 6, 2024 · Assigned by redhat