SINEC NMS reqToChangePassword Unauthorized Access

The vulnerability of the reqToChangePassword method implementation in the SINEC NMS network data management system is related to the absence of a authentication mechanism before granting access to the password change function. Exploiting this vulnerability could allow an attacker, operating...