CVE-2023-2807
Authentication bypass in password reset process
Summary
Authentication bypass in password reset process
Original description
The description as published by the source.
Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory pandorafms.com