{"cvss":0.0,"datePublished":"2008-08-15T00:00:00Z","dateUpdated":"2008-08-15T00:00:00Z","description":"components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the \"first enabled user (lowest id)\" password, typically for the administrator.","dueDate":"","id":"CVE-2008-3681","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"com_user","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Joomla! components/com_user/models/reset.php First Enabled User Vulnerability","vendor":"Joomla!"}