CVE-2018-1000884: Observable Discrepancy

Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6ab5c44386822c0 -- any release prior to 0.9.8-18 contains a CWE-208 / Information Exposure Through Timing Discrepancy vulnerability in Password reset code -- web/reset/index.php, line 51 that can result in Possible to determine password...

PT-2018-9600

Name of the Vulnerable Software and Affected Versions: Vesta CP versions prior to 0.9.8-18 Description: The issue is related to a timing discrepancy in the password reset code, located in the web/reset/index.php file, line 51. This can potentially allow an attacker to determine password reset cod...