PT-2023-21531 · Unknown · Pandora Fms
CVSS v3.1
6.4
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Pandora FMS versions prior to 7.71
Description
The issue is related to an Authentication Bypass by Spoofing vulnerability in the password reset process. This allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication.
Recommendations
For versions prior to 7.71, update to a version that includes the fix for this issue to prevent exploitation.
Exploit
Fix
Authentication Bypass by Spoofing
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pandora Fms