Skip to content
CVE Tracker
Back

CVE-2012-4381

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier for…

High8.1EPSS 4.1%
Published
Updated
Reserved
Assigned by
redhat

Description

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1) which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, (2) when an authentication plugin returns a false in the strict function, could allow remote attackers to use old passwords for non-existing accounts in an external authentication system via unspecified vectors.

Scores

CVSS scores of CVE-2012-4381, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1High8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
4.1% · top 9.3% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.1.

Weakness

Affected products

  • MediaWiki

    • affected before 1.18.5
    • affected 1.19.x before 1.19.2

References (7)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .