CVE-2022-44938

Summary

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/

• ←Previous
• Next→