Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-26829. Reason: This candidate is a reservation duplicate of CVE-2023-26829. Notes: All CVE users should reference CVE-2023-26829 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2023-26829

CVE-2023-26829 affects Gladinet CentreStack before 13.5.9808. The issue is an authentication bypass in the Password Reset component that lets remote attackers set a new password for any valid user without the previous password, resulting in full authentication bypass. Impact is authenticated acce...

CVE-2022-48138

CVE-2023-26829 describes an authentication bypass in the Password Reset component of Gladinet CentreStack prior to version 13.5.9808, allowing remote attackers to set a new password for any valid user account and bypass authentication. CVE-2022-48138 is a reservation/duplicate entry of CVE-2023-2...