[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2008-1484":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":54,"references":56,"score":65,"epss_score":66,"epss_percentile":67,"is_kev":68,"cisa_kev_date_added":69,"cisa_kev_due_date":69,"cisa_ssvc":70,"attack_mappings":76,"exploits":83},137412,"CVE-2008-1484","EUVD-2008-1486","The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account.  NOTE: this issue might be related to CVE-2006-5737.","2008-03-24T23:44:00Z",{"cvss_v2.0":10},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","NONE","MEDIUM","PARTIAL",true,[21],"CWE-264",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53],"cpe:2.3:a:punbb:punbb:1.0_alpha:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.14:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1.5:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1.1:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.12:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1.2:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.16:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.11:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0_beta3:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0.1:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1.4:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.15:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.1.3:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0_rc2:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.13:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0_beta2:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.10:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0_beta1:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*","cpe:2.3:a:punbb:punbb:1.0_rc1:*:*:*:*:*:*:*",[55],"Punbb Punbb",[57,58,59,60,61,62,63,64],"http:\u002F\u002Fosvdb.org\u002F45561","http:\u002F\u002Fpunbb.org\u002Fdownload\u002Fchangelogs\u002F1.2.16_to_1.2.17.txt","http:\u002F\u002Fpunbb.org\u002Fforums\u002Fviewtopic.php?id=18460","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F29043","http:\u002F\u002Fsektioneins.de\u002Fadvisories\u002FSE-2008-01.txt","http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F488408\u002F100\u002F200\u002Fthreaded","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F27908","https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F5165",0.53,0.04523,0.91515,false,null,{"timestamp":69,"automatable":71,"tech_impact":72,"exploitation":73,"cisa_decision":74,"cisa_remediation_timeline":75},"no","partial","none",{},"FSU",[77],{"name":78,"source":79,"tactics":80,"technique_id":82},"Exploit Public-Facing Application","attack_vector",[81],"initial-access","T1190",[84],{"link":64}]