CVE-2015-8570

Name of the Vulnerable Software and Affected Versions Lepide Active Directory Self Service (affected versions not specified)

Description The issue is related to errors in the implementation of the password reset functionality in Lepide Active Directory Self Service. This allows remote authenticated users to change arbitrary domain user passwords via a crafted request. The exploitation of this issue may enable an attacker to modify passwords of arbitrary users using a specially crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.