PT-2018-17941
CVE-2018-7195
·
Publicado
2018-03-27
·
Atualizado
2026-07-10
Descrição por
CVSS 3.1
8.1
AltaMétricasAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
osTicket versions prior to 1.10.2
Description
The issue allows remote attackers to reset arbitrary passwords by leveraging guest access and guessing a 6-digit number, provided an associated e-mail address is known.
Recommendations
For versions prior to 1.10.2, update to version 1.10.2 or later to resolve the issue.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾