CVE-2024-2463CWE-640

Weak password recovery mechanism in CDeX

High · published March 21, 2024

CVSS v3.1
8.0
EPSS
1%
Percentile
47.9
In the wild
Unconfirmed
What it is

Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX application versions through 5.7.1.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00598 · 47.9th percentile
Weakness
CWE-640 · Weak Password Recovery Mechanism for Forgotten Password
Published
2024-03-21T14:50Z
EPSS history
Timeline
  • 21 MAR 14:50Z
    Weak password recovery mechanism in CDeX
    cvelistv5