The vulnerability of the AD Self Password Reset password reset tool allows a hacker to reset arbitrary passwords.

The vulnerability of the PasswordReset.Controllers.ResetController.ChangePasswordIndex method PasswordReset.dll, a password reset tool for AD Self Password Reset, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to reset arbitra...

Design/Logic Flaw

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

CVE-2015-8267

The vulnerability CVE-2015-8267 affects Dovestones AD Self Password Reset prior to 3.0.4.0, where PasswordReset.Controllers.ResetController.ChangePasswordIndex() in PasswordReset.dll fails to properly validate the requesting user. An unauthenticated, remote attacker can reset arbitrary passwords ...

CVE-2015-8267

The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3.0.4.0 allows remote attackers to reset arbitrary passwords via a crafted request with a valid username...

Dovestones Software AD Self Password Reset 'PasswordReset.dll' Security Bypass Vulnerability

Dovestones Software AD Self Password Reset is a self-service solution for resetting passwords and unlocking user accounts from Dovestones Software, UK. A security bypass vulnerability exists in Dovestones Software AD Self Password Reset 3.0.3.0 and prior versions. An attacker could use this...