CVE-2023-2807 — Authentication bypass in password reset process

CVE-2023-2807

Authentication bypass in password reset process PUBLISHED

Description (CNA)

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.

Affected (CNA)

Vendor / product	Versions
Artica PFMS / Pandora FMS	affected v0 through v771

CWE

CWE-290

References

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

ADP enrichment

CVE

No English description supplied.

https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/

CISA-ADP

No English description supplied.

No references supplied.