2008-01-04 11:00:00
mitre
PUBLISHED
2z project 0.9.6.1 allows attackers to change the password without supplying the old password.