Описание
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.
Ссылки
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 13.5.9808 (исключая)
cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00294
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-863
CWE-863
Связанные уязвимости
CVSS3: 9.8
github
почти 3 года назад
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.
EPSS
Процентиль: 52%
0.00294
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-863
CWE-863