VULNERABILITY INTELLIGENCE
CVE-2006-4247
CVSS score6.4 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2006-09-29
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Description
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
Primary references
- security@debian.org — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch