7 matches found
How to use Secure LDAP to Change the User Password in NetScaler Gateway
This article provides information on how to use Lightweight Directory Access Protocol LDAP in NetScaler Gateway to change the users passwords. However, Secure LDAP is required to change the password. Note : Windows Server global catalog port 3268 or secure global catalog port 3269 do not support...
CVE-2016-5838
WordPress vulnerability CVE-2016-5838: The product (WordPress) before version 4.5.3 can bypass password-change restrictions by using knowledge of a cookie. Root cause is improper validation of cookie-derived state during password changes. Impact: enables remote attackers to bypass password-change...
PT-2016-6706
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5.3 Description The issue allows remote attackers to bypass intended password-change restrictions by leveraging knowledge of a cookie. Recommendations For versions prior to 4.5.3, update to version 4.5.3 or later ...
CVE-2016-0912: Undefined Security Weakness
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...
PT-2016-4466
Name of the Vulnerable Software and Affected Versions EMC Data Domain OS versions 5.4 through 5.7 before 5.7.2.0 Description The issue allows remote authenticated users to bypass intended password-change restrictions. This can be achieved by leveraging access to a different account with the same...
CVE-2013-2032
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attackers to bypass the intended restrictions of an extension that only implements one of these blocks...
PT-2011-4458
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions 10.7 through 10.7.1 Description The issue allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation, as the Open Directory does not require the current password to b...