Описание
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:eramba:eramba:2.8.1:*:*:*:community:*:*:*
cpe:2.3:a:eramba:eramba:2.19.3:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 56%
0.0034
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640
Связанные уязвимости
github
больше 3 лет назад
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token (createHash has only a million possibilities).
EPSS
Процентиль: 56%
0.0034
Низкий
9.8 Critical
CVSS3
5 Medium
CVSS2
Дефекты
CWE-640