Description
In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail address and send a forgot password email to themselves, thereby gaining administrative access.
Unscored
CVE-2017-8916
EUVD-2017-17856GHSA-64vh-qw36-84gx
In Center for Internet Security CIS-CAT Pro Dashboard before 1.0.4, an authenticated user is able to change an administrative user's e-mail…
Published Jan 31, 2018 · Updated Aug 5, 2024 · Assigned by mitre