Test ID:	1.3.6.1.4.1.25623.1.0.902343
Category:	Web application abuses
Title:	PivotX 'Reset my password' Feature Data Manipulation Vulnerability
Summary:	PivotX is prone to data manipulation vulnerability.
Description:	Summary: PivotX is prone to data manipulation vulnerability. Vulnerability Insight: This issue is caused by an error in the 'Reset my password' feature, which could allow unauthenticated attackers to change the password of any account by guessing the username. Vulnerability Impact: Successful exploitation will allow remote attackers to gain privileges via unknown vectors. Affected Software/OS: PivotX version before 2.2.5 Solution: Upgrade to PivotX version 2.2.5 or later CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1035 BugTraq ID: 46463 http://www.securityfocus.com/bid/46463 CERT/CC vulnerability note: VU#175068 http://www.kb.cert.org/vuls/id/175068 http://forum.pivotx.net/viewtopic.php?p=10639#p10639 http://osvdb.org/70935 http://secunia.com/advisories/43417 http://www.vupen.com/english/advisories/2011/0445 XForce ISS Database: pivotx-resetpassword-security-bypass(65539) https://exchange.xforce.ibmcloud.com/vulnerabilities/65539
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.