Security Advisory

CVE-2019-15749

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-10-07 11:41:21

Last updated 2024-08-05 00:56:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SITOS six Build v6.2.1 allows a user to change their password and recovery email address without requiring them to confirm the change with their old password. This would allow an attacker with access to the victim's account (e.g., via XSS or an unattended workstation) to change that password and address.

← Browse all CVEs View on cve.org ↗