CVE-2018-0696
HIGHOsstech Openam < 13.0.0-120 - Password Reset Weakness
Title source: ruleDescription
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Scores
CVSS v3
7.5
EPSS
0.0025
EPSS Percentile
48.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-640
Status
published
Products (1)
osstech/openam
13.0 - 13.0.0-120
Published
Feb 13, 2019
Tracked Since
Feb 18, 2026