5 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-3170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The have you forgotten your password links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username...
SUSE CVE-2025-52996
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file...
CVE-2018-17298
An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password...
CVE-2018-17298: Weak Password Recovery Mechanism for Forgotten Password
An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password...
PT-2018-13976
Name of the Vulnerable Software and Affected Versions Enalean Tuleap versions prior to 10.5 Description An issue was discovered where reset password links are not invalidated after a user changes their password. Recommendations For versions prior to 10.5, update to version 10.5 or later to resolv...