17391 matches found
Account Takeover
mantisbt/mantisbt is vulnerable to Account Takeover. The vulnerability is due to insufficient validation of the confirmation hash and token expiration during the password reset process, allowing an attacker to reset another user's password and take over their account...
MantisBT 安全漏洞
MantisBT is a Web-based open source defect tracking system from the MantisBT team. The system provides project management and defect tracking services in the form of Web operations. A security vulnerability exists in MantisBT versions prior to 2.26.2, which stems from insufficient access control...
CVE-2024-34077
CVE-2024-34077 affects MantisBT prior to 2.26.2. The issue is insufficient access control in the registration and password reset flow, allowing an attacker to reset another user’s password and take over the account when a victim has an incomplete reset and the verification token remains valid (ab...
CVE-2024-34077 MantisBT user account takeover in the signup/reset password process
MantisBT Mantis Bug Tracker is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible whi...
CVE-2024-34077 MantisBT user account takeover in the signup/reset password process
MantisBT Mantis Bug Tracker is an open source issue tracker. Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible whi...
Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible while the verification token is valid, i.e for 5 minutes after t...
GHSA-93X3-M7PW-PPQM Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request pending. The exploit is only possible while the verification token is valid, i.e for 5 minutes after t...
PT-2024-25687 · Mantisbt · Mantisbt
Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.26.2 Description: Insufficient access control in the registration and password reset process allows an attacker to reset another user's password and takeover their account, if the victim has an incomplete request...
PT-2024-29199
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the validation of completion descriptors consistency in the Linux kernel. Specifically, it involves checking that the first flag is set only for the first descriptor i...
WordPress White Label CMS plugin <= 2.7.3 - Missing Authorization to Plugin Settings Reset vulnerability
Missing Authorization to Plugin Settings Reset vulnerability discovered by Krzysztof Zając in WordPress Plugin White Label CMS versions = 2.7.3...
PT-2024-30172 · WordPress · White Label Cms
Name of the Vulnerable Software and Affected Versions: White Label CMS plugin for WordPress versions prior to 2.7.4 Description: The issue allows unauthorized modification of data due to a missing capability check on the reset plugin function. This makes it possible for unauthenticated attackers ...
White Label CMS < 2.7.4 - Missing Authorization to Plugin Settings Reset
Description The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the resetplugin function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attackers to reset plugin settings...
CVE-2024-4438
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...
CVE-2024-4438
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...
CVE-2024-4438
Technical details about CVE-2024-4438 are not provided in the supplied documents. The entry only states an incomplete fix related to CVE-2023-39325/CVE-2023-44487 in etcd within Red Hat OpenStack; no affected products, versions, or fixes are specified. Monitor for updates.
CVE-2024-4438 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...
CVE-2024-4438 Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platform
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...
kernel: KVM: SVM: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
A flaw was found in KVM. An improper check in svmsetx2apicmsrinterception may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition...
PT-2024-31140 · Red Hat · Red Hat Openstack Platform 16.1 +3
The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487, known as Rapid Reset. This issue occurs because the etcd package in the Red Hat OpenStack platform is using http://golang.org/x/net/http2 instead of the one provided by Red Ha...