CVE-2017-18486

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote...

CVE-2017-18486: Insufficient Entropy in PRNG

Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided in a password reset link, a user can leverage a weak PRNG to recover the shared secret used by the server for remote...

PT-2019-8421

Name of the Vulnerable Software and Affected Versions Jitbit Helpdesk versions prior to 9.0.3 Description The issue allows remote attackers to escalate privileges due to mishandling of the userHash parameter in the User/AutoLogin functionality. By inspecting the token value provided in a password...