Lucene search
MitreCVELIST:CVE-2020-27422HistoryNov 16, 2020 - 3:49 p.m.
CVE-2020-27422
2020-11-1615:49:10
mitre
www.cve.org
1
In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn’t expire once used, allowing an attacker to use the same link to takeover the account.
Related
nvd
nvd
CVE-2020-27422
2020-11-16 16:15:14
prion
prion
Design/Logic Flaw
2020-11-16 16:15:00
packetstorm
packetstorm
Anuko Time Tracker 1.19.23.5311 Password Reset
2020-11-13 00:00:00
cve
cve
CVE-2020-27422
2020-11-16 16:15:14
exploitdb
exploitdb
Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover
2020-12-02 00:00:00