Skip to content
OpenAdvisories
Medium · 6.4 CVE-2023-2807 EUVD-2023-34260GHSA-w5wr-pv9p-hfhr

Authentication bypass in password reset process

Published Jun 13, 2023 · Updated Jan 3, 2025 · Assigned by INCIBE

Description

Authentication Bypass by Spoofing vulnerability in the password reset process of Pandora FMS allows an unauthenticated attacker to initiate a password reset process for any user account without proper authentication. This issue affects PandoraFMS v771 and prior versions on all platforms.

Affected products

VendorProductAffectedFixed
Artica PFMS Pandora FMS v0 – ≤ v771 —

References