CVE-2022-44004

CVE-2022-44004 affects BACKCLICK Professional 5.9.63. An insecure design or lack of authentication allows unauthenticated attackers to complete the password-reset process and set a new password. CVSS v3.1 base score 9.8 (CRITICAL) with Network attack, no privileges, no user interaction required, ...

CVE-2022-44004

An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password...