Unscored CVE-2023-29975 EUVD-2023-33505GHSA-fr3j-67c2-cffx

An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification.

Published Nov 9, 2023 · Updated Sep 4, 2024 · Assigned by mitre

Description

An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification.

Advisories 1

WID-SEC-2023-2869 Netgate pfSense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 9, 2023

References

https://www.esecforte.com/cve-2023-29975-unverified-password-changed/