CVE-2002-0226

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password…

published June 25, 2002

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01748 · 77.5th percentile
Published
2002-06-25T04:00Z
EPSS history
Timeline
  • 25 JUN 04:00Z
    retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password…
    cvelistv5