CVE-2023-2807
Authentication bypass in password reset process
Résumé
Authentication bypass in password reset process
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory pandorafms.com