Description (CNA)
The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ai3 / QbiBot | affected earlier through 8.0.4 |
CWE
CWE-306
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.