PT-2023-21531 · Unknown · Pandora Fms
CVSS v3.1
6.4
Média
| Vetor | AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Pandora FMS versions prior to 7.71
Description
The issue is related to an Authentication Bypass by Spoofing vulnerability in the password reset process. This allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication.
Recommendations
For versions prior to 7.71, update to a version that includes the fix for this issue to prevent exploitation.
Exploit
Correção
Authentication Bypass by Spoofing
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Pandora Fms