CVE-2010-5090 Information

Description

SilverStripe before 2.4.2 allows remote authenticated users to change administrator passwords via vectors related to admin/security.

Reference

http://doc.silverstripe.org/sapphire/en/trunk/changelogs//2.4.2 http://www.openwall.com/lists/oss-security/2012/04/30/1 http://www.openwall.com/lists/oss-security/2012/04/30/3 http://www.openwall.com/lists/oss-security/2012/05/01/3