CVE-2024-6890

8.8HIGH

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administra

Published: 8/7/2024Updated: 11/21/2024
View on NVDView on MITRE

Description

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

AI AnalysisPowered by AI

Affected Products

journyxjournyx
11.5.4

References