CVE-2023-26829

2023-03-3100:00:00

mitre

www.cve.org

authentication bypass password reset remote attackers full bypass

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

74.5%

JSON

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

References

www.whiteoaksecurity.com/blog/centrestack-disclosure/