CVE-2023-2807

CVE-2023-2807 affects Pandora FMS (PandoraFMS) installations, including v771 and earlier. The issue is an Authentication Bypass by Spoofing in the password reset workflow, allowing an unauthenticated attacker to initiate a password reset for any user account. Root cause described across connected...

CVE-2023-2807 Authentication bypass in password reset process

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms...

CVE-2023-2807 Authentication bypass in password reset process

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms...

CVE-2023-2807 Authentication bypass in password reset process

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms...