Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2023-2807

Authentication bypass in password reset process

Description

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Artica PFMS Pandora FMS

Default version status: unaffected

  • v0 to ≤ v771affected

References