Описание
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.
Ссылки
- Vendor Advisory
- ExploitMailing ListThird Party Advisory
- Vendor Advisory
- ExploitMailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.5.0 (включая) до 8.5.3 (включая)
cpe:2.3:a:forcepoint:email_security:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00362
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640
CWE-640
Связанные уязвимости
CVSS3: 9.8
github
почти 4 года назад
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.
EPSS
Процентиль: 58%
0.00362
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640
CWE-640