2 matches found
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
9.3CVSS0.01339EPSS
SaveExploits0References1
CVE-2021-25323: Weak Password Recovery Mechanism for Forgotten Password
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
9.1CVSS5.8AI score0.01339EPSS
SaveExploits0References4
20