Epignosishq: >> Efront >> 5.2.21 Security Vulnerabilities
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.
CVSS Score
9.8
EPSS Score
0.004
Published
2021-03-03