Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-12-08T00:00:00

Updated: 2024-08-03T14:01:31.410Z

Reserved: 2022-11-07T00:00:00

Link: CVE-2022-44938

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-12-08T20:15:10.417

Modified: 2024-11-21T07:28:32.927

Link: CVE-2022-44938

cve-icon Redhat

No data.