CVE-2014-6412

WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.

mitre·CWE-640·Published 2018-04-12

CVSS

—

EPSS

0.05

KEV

Exploits

cve.orgen

121 chars

WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.

NVDen

121 chars

WordPress before 4.4 makes it easier for remote attackers to predict password-recovery tokens via a brute-force approach.

NVDes

155 chars

Las versiones anteriores a la 4.4 de WordPress facilitan que atacantes remotos puedan predecir tokens password-recovery mediante un ataque de fuerza bruta.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	8.1	2.2	5.9	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H