2 matches found
CVE-2020-1772: Improper Neutralization of Wildcards or Matching Symbols
It's possible to craft Lost Password requests with wildcards in the Token value, which allows attacker to retrieve valid Tokens, generated by users which already requested new passwords. This issue affects: OTRS Community Edition 5.0.41 and prior versions, 6.0.26 and prior versions. OTRS: 7.0.15...
7.5CVSS6.2AI score0.01597EPSS
SaveExploits0References2
CVE-2004-0930
The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...
5CVSS6AI score0.04906EPSS
SaveExploits1References15
20