CVE-2023-2807
Authentication bypass in password reset process
概要
Authentication bypass in password reset process
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory pandorafms.com