PT-2012-57: Privilege Gaining in Bitrix CMS Vulnerable softwareBitrix CMS Version: 11.5.6 and earlierLink: http://www.1c-bitrix.ru/products/cms/Severity levelSeverity level: High Impact: Administrator Privilege Gaining Access Vector: Remote CVSS v2: Base Score: 10 Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C)CVE: not assignedSoftware descriptionBitrix CMS is a professional web content management system.Vulnerability descriptionThe specialists of the Positive Research center have detected a Privilege Gaining vulnerability in Bitrix CMS.The vulnerability is possible due to the fact that Bitrix CMS uses mt_rand() pseudorandom number generator for generation of the password reset token, which can be potentially predicted under certain conditions. How to fix Update your software up to the latest version.Advisory status 03.09.2012 - Vendor gets vulnerability details 10.09.2012 - Vendor releases fixed version and details 15.07.2014 - Public disclosureCreditsThe vulnerability was detected by Timur Yunusov, Positive Research Center (Positive Technologies Company)Referenceshttp://en.securitylab.ru/lab/PT-2012-57 Reports on the vulnerabilities previously discovered by Positive Research:http://www.ptsecurity.com/research/advisory/ http://en.securitylab.ru/lab/