CVE-2020-27408

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change…

published December 4, 2020

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01674 · 76.7th percentile
Published
2020-12-04T15:27Z
EPSS history
Timeline
  • 04 DEC 15:27Z
    OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change…
    cvelistv5