Описание
The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields.
Ссылки
- Vendor Advisory
- PatchVendor Advisory
- PatchUS Government Resource
- Vendor Advisory
- PatchVendor Advisory
- PatchUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:consona:consona_dynamic_agent:-:-:enterprise:*:*:*:*:*
cpe:2.3:a:consona:consona_dynamic_agent:-:-:marketing:*:*:*:*:*
cpe:2.3:a:consona:consona_dynamic_agent:-:-:support:*:*:*:*:*
cpe:2.3:a:consona:consona_live_assistance:*:*:*:*:*:*:*:*
cpe:2.3:a:consona:consona_subscriber_assistance:*:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01102
Низкий
5.1 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
больше 3 лет назад
The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields.
EPSS
Процентиль: 78%
0.01102
Низкий
5.1 Medium
CVSS2
Дефекты
CWE-287