CVE-2024-6890

8.8HIGH

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administra

Опубликовано: 8/7/2024Обновлено: 11/21/2024
Посмотреть на NVDПосмотреть на MITRE

Описание

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

ИИ-АнализНа базе ИИ

Затронутые продукты

journyxjournyx
11.5.4

Ссылки