CVE-2024-42850

Critical

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

mitre·CWE-521·Published 2024-08-16

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

133 chars

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

NVDen

133 chars

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

OSV.deven

133 chars

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

GHSAen

133 chars

An issue in the password change function of Silverpeas v6.4.2 and lower allows for the bypassing of password complexity requirements.

NVDes

156 chars

Un problema en la función de cambio de contraseña de Silverpeas v6.4.2 y versiones anteriores permite eludir los requisitos de complejidad de la contraseña.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H