Technical impact
The vulnerability centers on a weak password recovery mechanism that allows an attacker to trigger password reset requests without proper authentication or authorization checks. By manipulating the password recovery flow, an attacker can obtain a reset link or temporary credential, effectively bypassing the normal login process and gaining unauthorized access to user accounts. This can lead to exposure of personal or confidential data stored in Liman MYS and enable further attacks against the system. The weakness is classified as CWE‑640, indicating an insecure handling of authentication control.
Affected Systems
HAVELSAN Inc. Liman MYS is affected for all releases before version 2.3.5‑1131, including the 2.3.4‑1124 line and earlier builds.
Risk and Exploitability
The CVSS score of 8.1 marks this flaw as high severity, and though the EPSS score is not available, the lack of listing in the CISA KEV catalog suggests a lower current exploitation rate. Nonetheless, the vulnerability can be exploited remotely by anyone who can access the public password recovery interface, making it highly relevant for attackers looking to compromise user accounts. Immediate remediation is recommended to prevent potential account takeover and data exposure.
