NVD

Id
81664  
Name
CVE-2017-5594  
Description
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-02-07  
Published
2017-01-25  
Modified Date
2017-01-27  
Seq
2017-5594  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
404808 81664 CVE-2017-3791 95933  View
404809 81664 CVE-2017-3791 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-prime-home  View
404810 81664 CVE-2017-3791 95933  View
404811 81664 CVE-2017-3791 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170201-prime-home  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64998 JVNDB-2017-001385 Pagekit CMS における登録ユーザのパスワードをリセットされる脆弱性 Pagekit CMS には、デバッグツールバーが有効な場合、登録ユーザのパスワードをリセットされる脆弱性が存在します。 CVE-2017-5594 CVE-2017-5594 81664 4.3 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001385.html 2017-01-20 2017-02-09 View