Описание
OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.
Ссылки
- Product
- Third Party Advisory
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 16.6.0.1 (исключая)
cpe:2.3:a:opentext:bizmanager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00112
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-287
CWE-295
Связанные уязвимости
CVSS3: 9.8
github
почти 3 года назад
OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allows any authenticated user to change the password of any other user, including the Administrator account.
EPSS
Процентиль: 30%
0.00112
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-287
CWE-295