CVE-2011-4555: One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote...

Security readout for executives and security teams

One Click Orgs before 1.2.3 allowed multiple accounts to share the same email address. An authenticated user could use another person’s email, disrupting login or making votes and comments appear misleading. The main risk is integrity and availability in organizations using the platform for governance decisions. Exposure appears limited to One Click Orgs deployments running versions before 1.2.3, particularly instances where authenticated users can register accounts or change account email addresses. The source bundle does not identify specific vendors, CPEs, hosting models, or downstream packaged products. Treat this as a targeted governance integrity issue, not a broad infrastructure emergency. Prioritize remediation if One Click Orgs supports formal votes, member decisions, or public comments, because trust in outcomes could be affected. Mitigation focus: Upgrade One Click Orgs to version 1.2.3 or later.; Verify email addresses are unique across all user accounts.; Review and resolve existing duplicate email records..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.