CWE-640 Weak Password Recovery Mechanism for Forgotten Password
baseThe product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (367)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-7028US | critical9.8OT kritisch | KEV | ||
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.… | ||||
| CVE-2021-32648US | critical9.1OT kritisch | KEV | ||
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain… | ||||
| CVE-2019-18818US | critical9.8 | Exploit | ||
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. | ||||
| CVE-2017-7615US | high8.8 | Exploit | ||
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. | ||||
| CVE-2019-19844US | critical9.8 | Exploit | ||
Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover. A suitably crafted email address (that is equal to an existing user's email address after cas… | ||||
| CVE-2024-2862US | critical9.8 | — | ||
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
| ||||
| CVE-2026-19632US | critical9.8 | Exploit | ||
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3… | ||||
| CVE-2012-5686US | critical9.8OT hoch | Exploit | ||
ZPanel 10.0.1 has insufficient entropy for its password reset process. | ||||
| CVE-2017-17097US | critical9.8 | Exploit | ||
gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthenticated request, and then sends e-mail with… | ||||
| CVE-2020-11027US | high8.1 | Exploit | ||
In affected versions of WordPress, a password reset link emailed to a user does not expire upon changing the user password. Access would be needed to the email account of the user… | ||||
| CVE-2026-93453US | high8.3 | Exploit | ||
SOGo before 5.12.11 constructs password-reset links using the client-supplied Origin header as the authority, allowing unauthenticated attackers to redirect recovery tokens to atta… | ||||
| CVE-2017-8295US | medium5.9 | Exploit | ||
WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to reset arbitrary passwords by making a craf… | ||||
| CVE-2015-7257US | high7.5 | Exploit | ||
ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrator users to change the admin password by intercepting an outg… | ||||
| CVE-2017-5594US | high7.5 | Exploit | ||
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled.… | ||||
| CVE-2022-23855US | critical9.8 | — | ||
An issue was discovered in Saviynt Enterprise Identity Cloud (EIC) 5.5 SP2.x. An authentication bypass in ECM/maintenance/forgotpasswordstep1 allows an unauthenticated user to rese… | ||||
| CVE-2021-22763US | critical9.8 | — | ||
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see securi… | ||||
| CVE-2021-28293US | critical9.8 | — | ||
Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to reco… | ||||
| CVE-2019-15929US | critical9.8 | — | ||
In Craft CMS through 3.1.7, the elevated session password prompt was not being rate limited like normal login forms, leading to the possibility of a brute force attempt on them. | ||||
| CVE-2018-16988US | critical9.8 | — | ||
An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5… | ||||
| CVE-2019-11393US | critical9.8 | — | ||
An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password chang… | ||||
03
Angriffsmuster (1)
CAPEC-Angriffsmuster, die dies ausnutzen.
04
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan