Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mgr7-vch3-x89h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

EPSS

Процентиль: 48%
0.00252
Низкий

Дефекты

CWE-640

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 4 лет назад

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

CVSS3: 5.3
nvd
больше 4 лет назад

Malicious attacker is able to find out valid user logins by using the "lost password" feature. This issue affects: OTRS AG ((OTRS)) Community Edition version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions.

CVSS3: 5.3
debian
больше 4 лет назад

Malicious attacker is able to find out valid user logins by using the ...

EPSS

Процентиль: 48%
0.00252
Низкий

Дефекты

CWE-640