Design/Logic Flaw

2021-12-0719:15:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.7%

JSON

Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function

CPENameOperatorVersion
mahavitaranle7.50

CPE	Name	Operator	Version
	mahavitaran	le	7.50

References

maharashtra.com

cvewalkthrough.com/cve-2021-41716-mahavitaran-android-application-account-take-over-via-otp-fixation/