Lucene search
GoogleOSV:CVE-2020-25728HistorySep 17, 2020 - 5:15 p.m.
CVE-2020-25728
2020-09-1717:15:16
Google
osv.dev
8
The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user’s account password include the admin account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alfrescoresetpassword | eq | 1.1.0.RC3 | |
| alfrescoresetpassword | eq | 1.2.0.RC1 | |
| alfrescoresetpassword | eq | 1.1.0 | |
| alfrescoresetpassword | eq | 1.1.0.RC2 |
Related
prion
prion
Default credentials
2020-09-17 17:15:00
cve
cve
CVE-2020-25728
2020-09-17 17:15:16
nvd
nvd
CVE-2020-25728
2020-09-17 17:15:16
cvelist
cvelist
CVE-2020-25728
2020-09-17 16:34:45