Executive Summary

Microweber CMS 2.0 has weak password requirements because it does not enforce minimum password length or complexity during password resets. This allows users to set very weak passwords, including single-character passwords, which increases the risk of account compromise, including for administrative accounts.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to account compromise due to weak passwords, potentially allowing attackers to gain unauthorized access to user and administrative accounts. This can result in loss of confidentiality, integrity, and availability of the system and its data.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, immediately enforce strong password policies in Microweber CMS 2.0 by configuring or updating the application to require minimum password length and complexity during password resets. Ensure that users cannot set weak passwords such as single-character passwords. Additionally, review and reset passwords for administrative accounts to comply with strong password requirements.

Useful 0 Not Useful 0