CVE Feed

Dashboard / CVE / CVE-2012-5686

CVE-2012-5686

ZPanel 10.0.1 has insufficient entropy for its password reset process.

Published:Feb 4, 2020

Last Modified:Nov 21, 2024

EPS:Feb 4, 2020

EPSS Score:0.14443

CVSS Score:9.8

Affected Products

Vendor

Product

Action

Vendor

Zpanelcp

Product

Zpanel

Zpanelcp

Zpanel

Exploits

https://www.exploit-db.com/exploits/22490

Common Weakness Enumeration

CWE-640 Weak Password Recovery Mechanism for Forgotten Password

CWE-798 Use of Hard-coded Credentials

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-191 Read Sensitive Constants Within an Executable

CAPEC-50 Password Recovery Exploitation

CAPEC-70 Try Common or Default Usernames and Passwords

Related CVEs

CVE-2012-5685 (CVSS 7.5) — SQL injection vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to execute arbitrary SQL comm…

CVE-2012-6654 (CVSS 7.5) — Multiple SQL injection vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers to execute arbitrar…

CVE-2012-5683 (CVSS 6.8) — Multiple cross-site request forgery (CSRF) vulnerabilities in ZPanel 10.0.1 and earlier allow remote attackers…

CVE-2012-5684 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in ZPanel 10.0.1 and earlier allows remote attackers to inject arbitr…

References

http://www.securityfocus.com/bid/56400

https://exchange.xforce.ibmcloud.com/vulnerabilities/79841

http://www.securityfocus.com/bid/56400

https://exchange.xforce.ibmcloud.com/vulnerabilities/79841

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High