CVE-2011-1035 - Vulnerability Details - OpenCVE

The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.03366.

Key SSVC decision points have not yet been added.

Vendors	Products
Pivotx	Pivotx

Configuration 1 [-]

OR	cpe:2.3:a:pivotx:pivotx::::::::
	cpe:2.3:a:pivotx:pivotx:2.1.0:::::::*
	cpe:2.3:a:pivotx:pivotx:2.1.1:::::::*
	cpe:2.3:a:pivotx:pivotx:2.1.2:::::::*
	cpe:2.3:a:pivotx:pivotx:2.2.0:::::::*
	cpe:2.3:a:pivotx:pivotx:2.2.0:b1::::::
	cpe:2.3:a:pivotx:pivotx:2.2.0:b2::::::
	cpe:2.3:a:pivotx:pivotx:2.2.0:rc::::::
	cpe:2.3:a:pivotx:pivotx:2.2.1:::::::*
	cpe:2.3:a:pivotx:pivotx:2.2.2:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2011-1051	The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://blog.pivotx.net/2011-02-16/pivotx-225-released
http://forum.pivotx.net/viewtopic.php?f=2&t=1961
http://forum.pivotx.net/viewtopic.php?f=2&t=1967
http://forum.pivotx.net/viewtopic.php?p=10639#p10639
http://osvdb.org/70935
http://secunia.com/advisories/43417
http://www.kb.cert.org/vuls/id/175068
http://www.securityfocus.com/bid/46463
http://www.vupen.com/english/advisories/2011/0445
https://exchange.xforce.ibmcloud.com/vulnerabilities/65539

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-02-18T23:00:00

Updated: 2024-08-06T22:14:27.244Z

Reserved: 2011-02-18T00:00:00

Link: CVE-2011-1035

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2011-02-19T01:00:03.683

Modified: 2025-04-11T00:51:21.963

Link: CVE-2011-1035

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-02-16T00:00:00", "descriptions": [{"lang": "en", "value": "The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961"}, {"name": "pivotx-resetpassword-security-bypass(65539)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65539"}, {"tags": ["x_refsource_MISC"], "url": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639"}, {"name": "ADV-2011-0445", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2011/0445"}, {"name": "43417", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/43417"}, {"name": "70935", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/70935"}, {"name": "46463", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/46463"}, {"name": "VU#175068", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/175068"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://blog.pivotx.net/2011-02-16/pivotx-225-released"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-1035", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961", "refsource": "CONFIRM", "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961"}, {"name": "pivotx-resetpassword-security-bypass(65539)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65539"}, {"name": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639", "refsource": "MISC", "url": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639"}, {"name": "ADV-2011-0445", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2011/0445"}, {"name": "43417", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/43417"}, {"name": "70935", "refsource": "OSVDB", "url": "http://osvdb.org/70935"}, {"name": "46463", "refsource": "BID", "url": "http://www.securityfocus.com/bid/46463"}, {"name": "VU#175068", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/175068"}, {"name": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967", "refsource": "CONFIRM", "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967"}, {"name": "http://blog.pivotx.net/2011-02-16/pivotx-225-released", "refsource": "CONFIRM", "url": "http://blog.pivotx.net/2011-02-16/pivotx-225-released"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T22:14:27.244Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961"}, {"name": "pivotx-resetpassword-security-bypass(65539)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65539"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639"}, {"name": "ADV-2011-0445", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2011/0445"}, {"name": "43417", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/43417"}, {"name": "70935", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/70935"}, {"name": "46463", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/46463"}, {"name": "VU#175068", "tags": ["third-party-advisory", "x_refsource_CERT-VN", "x_transferred"], "url": "http://www.kb.cert.org/vuls/id/175068"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://blog.pivotx.net/2011-02-16/pivotx-225-released"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-1035", "datePublished": "2011-02-18T23:00:00", "dateReserved": "2011-02-18T00:00:00", "dateUpdated": "2024-08-06T22:14:27.244Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:pivotx:pivotx:*:*:*:*:*:*:*:*", "matchCriteriaId": "84201E35-4A87-4A31-BBB1-0DEB91ED0251", "versionEndIncluding": "2.2.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F3990C45-2F1A-4E97-80CD-1BF07A6DEE84", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "847926C5-EC16-420B-993F-D0C6991DD0AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "101512B3-9573-45F0-8E23-ECCFBC7BC981", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "EEB36519-001A-446F-B680-2DCBF4A7C4F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.0:b1:*:*:*:*:*:*", "matchCriteriaId": "D09514E0-221A-4A8C-BE34-CCCEDFBE54C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.0:b2:*:*:*:*:*:*", "matchCriteriaId": "A43A812E-D866-45AB-92DF-A5617279FC10", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.0:rc:*:*:*:*:*:*", "matchCriteriaId": "179DBEB0-22A0-46EA-9E48-BC3A79C1E37A", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "2FF74C6E-E55E-4C01-B4C9-6BB60D57E889", "vulnerable": true}, {"criteria": "cpe:2.3:a:pivotx:pivotx:2.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "47F90583-61D3-42C2-9819-4AC507B1CC95", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors."}, {"lang": "es", "value": "El restablecimiento de contrase\u00f1a en PivotX anterior a versi\u00f3n 2.2.4, permite a los atacantes remotos modificar las contrase\u00f1as de usuarios arbitrarios por medio de vectores no especificados."}], "id": "CVE-2011-1035", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-02-19T01:00:03.683", "references": [{"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://blog.pivotx.net/2011-02-16/pivotx-225-released"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967"}, {"source": "cve@mitre.org", "url": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/70935"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43417"}, {"source": "cve@mitre.org", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/175068"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/46463"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0445"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65539"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://blog.pivotx.net/2011-02-16/pivotx-225-released"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1961"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://forum.pivotx.net/viewtopic.php?f=2&t=1967"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://forum.pivotx.net/viewtopic.php?p=10639#p10639"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/70935"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/43417"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/175068"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/46463"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2011/0445"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65539"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-255"}], "source": "nvd@nist.gov", "type": "Primary"}]}