CVE-2023-2807CWE-290

Authentication bypass in password reset process

Medium · published June 13, 2023

CVSS v3.1
6.4
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00618 · 48.9th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2023-06-13T11:10Z
EPSS history
Timeline
  • 13 JUN 11:10Z
    Authentication bypass in password reset process
    cvelistv5