CVE-2021-25839

A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing...

CVE-2021-25839

MintHCM 3.0.8 exposes a weak password requirement in the Create New User flow, enabling easier brute-forcing of new accounts. The root cause is insufficient password policy enforcement in user creation; impact is elevated risk of account compromise. Exploitation details are not provided in the co...