CVE-2015-8570

CVE-2015-8570 involves Lepide Active Directory Self Service. The vulnerability allows remote authenticated domain users to change arbitrary domain passwords via crafted requests during the password reset process, due to a flaw in how the reset functionality is processed. Multiple sources (NVD ent...