CWE-620: Unverified Password Change
When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- vtenext vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php 9.3 Critical
- phpmyadmin phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set 5.3 Medium
- cheaper-inference omniroute OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login 7.0 High
- linksys wag200g Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password 7.0 High
- projectsend ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password 7.6 High
- devolutions server, mariadb +1 more MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges 8.8 High
- error311 filerise FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification 6.5 Medium
- devolutions server Gotify: Insufficiently Protected Password Change endpoint 5.3 Medium
- laurent22 joplin Joplin Server password reset accepts tokens issued for unrelated purposes 4.8 Medium
- zlt2000 microservices-platform microservices-platform through 6.0.0 Unverified Password Change via /users/password 8.7 High
- pig-mesh pig pig before 4.1.0 Unverified Password Change via /register/password 9.3 Critical
- sfturing hosp order sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change 6.9 Medium
- thorsten phpmyfaq phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change 7.1 High
- ptc windchill risk and reliability enterprise edition (formerly relex) Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition 9.3 Critical
- laravel-backpack crud backpack/crud: MyAccountController allows changing the login email without a current-password check 6.5 Medium
- laravel-backpack crud backpack/crud: Unverified password change in MyAccountController via mass assignment 7.6 High
- labredescefetrj wegia WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha 8.6 High
- semaphoreui semaphore Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation 8.3 High
- sonatype nexus repository 3, nexus repository manager +1 more Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint 6.9 Medium
- britcoder single sign on for tng Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change 9.8 Critical
-
poweradmin/poweradminPackagist Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account 8.8 High - vimesoft inc. enterprise video platform Improper Authentication in Vimesoft's Enterprise Video Platform 9.8 Critical
- cap-go capgo Capgo - Authentication Bypass in Password Change via Missing Current Password Validation 8.7 High
- siemens cpci85 central processing/communication, sicore base system +1 more A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions <... 8.6 High
- opf openproject OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements 5.9 Medium
- openidentityplatform openam OpenAM Account Takeover via Unverified Password Change in OAuth2 Module 7.4 High
- kmw km-ip421, km-ip521 +1 more KMW CCTV Security Cameras Unverified Password Change 9.1 Critical
- devolutions server Unverified password change in Devolutions Server allows an attacker to change a user's password... 3.1 Low
- concrete cms cms, concretecms concrete cms +1 more Concrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass. 5.3 Medium
- openc3 cosmos OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence 8.1 High
- blueprintue blueprintue-self-hosted-edition blueprintUE: Authenticated Password Change Does Not Verify Current Password 8.1 High
- navicat for oracle Navicat for Oracle 12.1.15 Password Field Denial of Service 6.9 Medium
- thedaylightstudio fuel cms An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset... 9.1 Critical
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 more Lantronix EDS3000PS Unverified Password Change 5.1 Medium
- lantronix eds3000ps series, eds3008ps1ns firmware, eds3016ps1ns firmware +2 more Lantronix EDS3000PS OS Command Injection 8.6 High
- shenzhen hongyavision technology co., ltd. (sodola networks) sodola sl902-swtgw124as, sodola-network sl902-swtgw124as firmware +1 more SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change 7.1 High
- netikus eventsentry EventSentry < 6.0.1.20 Web Reports Unverified Password Change 8.6 High
- vichan-devel vichan vichan-devel vichan Password Change pages.php unverified password change 5.1 Medium
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 more Tenda W30E V2 Allows Password Changes Without Verifying Current Password 8.7 High
- weintek cmt-ctrl01, cmt-svrx-820, cmt3072xh +1 more +3 more Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service 8.7 High
- progress moveit transfer MOVEit Transfer REST API does not require current password in order to initiate the password change process 3.7 Low
- ibm aspera orchestrator IBM Aspera Orchestrator Unverified Password Change 8.1 High
- ibexa user Ibexa User Bundle is missing password change validation 8.5 High
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 more An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7... 6.5 Medium
- waveshare rs232\/485 to wifi eth \(b\) firmware Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2... 9.8 Critical
- flowise Flowise - Unverified Password Change via Account Settings 8.7 High
- flowise Flowise - Unverified Email Change via Account Profile Endpoint 8.7 High
- No product listed A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14... 7.1 High
- element-hq matrix-authentication-service Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password 8.3 High
- No product listed FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the... 8.2 High
- Show olderLoading…