PT-2026-24256 · Telekom · Account Management Portal
CVE-2025-69614
·
Publicado
2026-03-10
·
Atualizado
2026-05-07
CVSS v3.1
9.4
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Deutsche Telekom AG Telekom Account Management Portal versions prior to 2025-10-27
Description
An incorrect access control issue exists due to activation token reuse on the password-reset endpoint. This allows unauthorized password resets and potential full account takeover. The issue was fixed on 2025-10-31. The affected API endpoint is the password-reset endpoint.
Recommendations
Update to versions 2025-10-27 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Account Management Portal