Skip to content
OpenAdvisories

Vendor

Journyx

4 known vulnerabilities.

Products

Journyx (jtime) 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6890

    Journyx Unauthenticated Password Reset Bruteforce

    Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

    Journyx Journyx (jtime)