Design/Logic Flaw

2019-03-2817:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.4%

JSON

A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.

CPENameOperatorVersion
email_securityge8.5.0
email_securityle8.5.3

CPE	Name	Operator	Version
	email_security	ge	8.5.0
	email_security	le	8.5.3

References

help.forcepoint.com/security/CVE/CVE-2018-16529.html

seclists.org/fulldisclosure/2018/Nov/23