CVE-2018-16529

State: Published
Severity: Not scored
Published: Mar 28, 2019
Updated: Aug 5, 2024
Reserved: Sep 5, 2018

Description

A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.

Scores

The record has no CVSS score.

Weaknesses

CWE-640 Weak Password Recovery Mechanism for Forgotten Password

Affected Products

Product	Versions
Forcepoint Email SecurityForcepoint	8.5.xAffected

References

https://seclists.org/fulldisclosure/2018/Nov/23
https://help.forcepoint.com/security/CVE/CVE-2018-16529.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.