CVE Vulnerabilities

CVE-2010-4728

Published: Feb 08, 2011 | Modified: Feb 14, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.

Affected Software

Name Vendor Start Version End Version
Zikula_application_framework Zikula 1.2.3 1.2.3
Zikula_application_framework Zikula 1.1.2 1.1.2
Zikula_application_framework Zikula 1.2.2 1.2.2
Zikula_application_framework Zikula 1.2.4 1.2.4
Zikula_application_framework Zikula * 1.2.5
Zikula_application_framework Zikula 1.2.1 1.2.1

References