Lucene search
MitreCVELIST:CVE-2022-25027HistoryJan 12, 2023 - 12:00 a.m.
CVE-2022-25027
2023-01-1200:00:00
mitre
www.cve.org
rocket trufusion
forgotten password
authentication bypass
remote attackers
restricted access
0.002 Low
EPSS
Percentile
54.3%
The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user’s session token when the “Password forgotten?” button is clicked.
Related
cve
cve
CVE-2022-25027
2023-01-12 23:15:09
nvd
nvd
CVE-2022-25027
2023-01-12 23:15:09
prion
prion
Authentication flaw
2023-01-12 23:15:00