CVE-2017-14005

The CVE is for ProMinent MultiFLEX M10a Controller web interface. Affected: all versions of the MultiFLEX M10a Controller web UI. Issue: Unverified Password Change allows an authenticated attacker to change a user’s password, enabling future access and potential configuration changes. Impact: hig...