Project: 
Mass Password Reset
Date: 
2018-June-27
Security risk: 
Less critical 9∕25 AC:Complex/A:User/CI:Some/II:None/E:Theoretical/TD:Default
Vulnerability: 
Insecure Randomness
Description: 

This module enables you to reset passwords for all users based upon their user role.

The module doesn't use a strong source of randomness, creating weak and predictable passwords.

This vulnerability is mitigated by the fact that the site must be configured to reveal the password to the attacker, which is a common configuration.

Solution: 

Install the latest version:

Also see the Mass Password Reset project page.

Reported By: 
Fixed By: 
Coordinated By: