Authentication flaw

2023-01-1223:15:00

PRIOn knowledge base

www.prio-n.com

authentication

flaw

remote attack

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.3%

JSON

The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to bypass authentication and access restricted pages by validating the user’s session token when the “Password forgotten?” button is clicked.

CPENameOperatorVersion
trufusion_enterpriselt7.9.5.1

CPE	Name	Operator	Version
	trufusion_enterprise	lt	7.9.5.1

References

labs.nettitude.com/blog/cve-2022-25026-cve-2022-25027-vulnerabilities-in-rocket-trufusion-enterprise/