Design/Logic Flaw

2023-06-1312:15:00

PRIOn knowledge base

www.prio-n.com

authentication bypass

spoofing

vulnerability

password reset

pandora fms

unauthenticated attacker

nvd

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

JSON

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.