Description (CNA)
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Epignosis | affected Epignosis eFront LMS 5.2.17, Epignosis eFront LMS 5.2.21 |
CWE
CWE-337
References
ADP enrichment
No English description supplied.