4 matches found
CVE-2020-25105
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token createHash has only a million possibilities...
CVE-2020-25105
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token createHash has only a million possibilities...
CVE-2020-25105
eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token createHash has only a million possibilities...
CVE-2020-25105
eramba c2.8.1 and Enterprise before e2.19.3 expose a weak password recovery token: createHash has only ~1,000,000 possibilities, enabling guessable token recovery. CVSS vectors show MEDIUM (2.0) and CRITICAL (3.1) with HIGH impact to confidentiality, integrity, and availability; no remediation de...