Lucene search
Bbf0bd87-ece2-41be-b873-96928ee8fab9NVD:CVE-2024-6890HistoryAug 07, 2024 - 11:15 p.m.
CVE-2024-6890
2024-08-0723:15:41
CWE-334
CWE-798
CWE-321
CWE-799
bbf0bd87-ece2-41be-b873-96928ee8fab9
web.nvd.nist.gov
3
password reset
security vulnerability
journyx
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.
Affected configurations
Node
journyxjournyxMatch11.5.4linux
Related
vulnrichment
vulnrichment
CVE-2024-6890 Journyx Unauthenticated Password Reset Bruteforce
2024-08-07 23:09:40
cve
cve
CVE-2024-6890
2024-08-07 23:15:41
korelogic
korelogic
Journyx Unauthenticated Password Reset Bruteforce
2024-08-07 00:00:00
cvelist
cvelist
CVE-2024-6890 Journyx Unauthenticated Password Reset Bruteforce
2024-08-07 23:09:40
zdt
zdt
Journyx 11.5.4 Unauthenticated Password Reset Bruteforce Vulnerability
2024-08-08 00:00:00
packetstorm
packetstorm
Journyx 11.5.4 Unauthenticated Password Reset Bruteforce
2024-08-08 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-6890