CVE-2020-14930: Cleartext Transmission of Sensitive Information

An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but i...

PT-2020-14067

Name of the Vulnerable Software and Affected Versions BT CTROMS Terminal OS Port Portal CT-464 Description An issue in the password-reset feature allows account takeover by disclosing the verification token. When a getverificationcode.jsp request is made, the token is sent not only to the user's...