medium5.0
CVE-2012-3798
The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to gen…
Impact
The Janrain Capture module 6.x-1.0 and 7.x-1.0 for Drupal, when creating a local user account, allows attackers to obtain part of the initial input used to generate passwords, which makes it easier to conduct brute force password guessing attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bryce Hamrick | Janrain Capture | Versions 6.x-1.0, 7.x-1.0 |