Exploit for Use of Hard-coded Credentials in Clickstudios Passwordstate

CVE-20...

CVE-2020-26061: Missing Authentication for Critical Function

ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not validate whether the user has successfully authenticated using security questions. An unauthenticated, remote attacker can send a crafted...

PT-2020-16279

Name of the Vulnerable Software and Affected Versions ClickStudios Passwordstate Password Reset Portal versions prior to 8501 Description The issue concerns an authentication bypass. Specifically, the ResetPassword function does not validate whether the user has successfully authenticated using...