CWE-640: Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft corporation azure ad connect, microsoft azure active directory connect +1 moreAzure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to...8.1 High
- qnap qtsQNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.7.5 High
- echatserver easy chat serverregister.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to...7.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...7.5 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password3.7 Low
- wordpressWordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which...5.9 Medium
- craftcms craft cmsCraft CMS subject to URL forgery5.3 Medium
- mantisbtMantisBT allows arbitrary password reset8.8 High
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable Cleartext Transmission of Password vulnerability exists in the Web Application...7.5 High
- emc documentum eroomEMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom...9.8 Critical
- pagekitPagekit Weak Password Recovery Mechanism for Forgotten Password7.5 High
- moodleMoodle Weak Password Recovery Mechanism for Forgotten Password7.3 High
- bmc remedy action request systemRemedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows attackers to reset...7.5 High
- ibm tealeaf customer experienceThe web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049...6.5 Medium
- ibm tealeaf customer experienceThe web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049...7.5 High