CVE-2020-15181

CVE-2020-15181 affects the Alfresco Reset Password add-on prior to version 1.2.0. The issue stems from relying on untrusted inputs when making a security decision, allowing an attacker to gain administrator access to the system on affected servers. The vulnerability is fixed in version 1.2.0. In ...

CVE-2020-25728

The CVE pertains to the Alfresco Reset Password add-on prior to version 1.2.0, which uses a broken increment-based algorithm that lets a malicious user change any user’s password, including the admin account. Exploitation details are not provided in the connected documents beyond this description...