CVE-2019-12943

High

TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive…

mitre·CWE-640·Published 2019-09-10

CVSS

8.1

EPSS

0.01

KEV

Exploits

cve.orgen

167 chars

TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.

NVDen

167 chars

TTLock devices do not properly restrict password-reset attempts, leading to incorrect access control and disclosure of sensitive information about valid account names.

Los dispositivos TTLock no restringen apropiadamente los intentos de restablecimiento de contraseña, lo que conlleva a un control de acceso incorrecto y a la divulgación de información confidencial sobre nombres de cuenta válidos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	2.6	4.9	2.9	AV:N/AC:H/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H