CVE-2021-28293

CVE-2021-28293 affects Seceon aiSIEM prior to 6.3.2 (build 585). The vulnerability is an unauthenticated account takeover via the Forgot Password feature, resulting from misconfiguration that allows recovery of the password reset link and enables an attacker to set an arbitrary password for any u...