An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change function.