CVE-2018-17298

An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password.

mitre·CWE-640·Published 2018-09-21

CVSS

—

EPSS

0.02

KEV

Exploits

cve.orgen

130 chars

An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password.

NVDen

130 chars

An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password.

NVDes

187 chars

Se ha descubierto un problema en Enalean Tuleap en versiones anteriores a la 10.5. Los enlaces de reinicio de contraseña no están validados después de que el usuario cambie su contraseña.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H