CVE-2012-3798 The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to conduct brute force password guessing attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bryce hamrick janrain capture | = 6.x-1.0 | No fix listed |
| bryce hamrick janrain capture | = 7.x-1.0 | No fix listed |
References
- drupal.org patch
- drupal.org patch
- drupal.org patch vendor-advisory
- 82957 vdb-entry