CVE-2011-2082

CVE-2011-2082 describes a vulnerability in Best Practical Solutions RT versions 3.x before 3.8.12 and 4.x before 4.0.6, where the vulnerable-passwords script fails to update password-hash algorithms for disabled user accounts. This oversight allows attackers to more easily brute-force cleartext passwords from the database, potentially enabling unauthorized access if accounts are re-enabled. The vulnerability has a CVSS score of 5.0, indicating a medium severity with network access and low attack complexity, primarily impacting confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.