CVE-2020-28642
9.8CRITICALIn InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Опубликовано: 11/16/2020Обновлено: 11/21/2024
Описание
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
ИИ-АнализНа базе ИИ
Затронутые продукты
infinitewpinfinitewp
Ссылки
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory
- https://www.whitehack.de/advisories/HWADV2020-001.txtThird Party Advisory