CVE-2023-36487
- State
- Published
- Severity
- Not scored
- Published
- Jun 29, 2023
- Updated
- Nov 26, 2024
- Reserved
- Jun 22, 2023
Description
The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.
Scores
The record has no CVSS score.
Weaknesses
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141694&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI
- https://docu.ilias.de/ilias.php?ref_id=1719&obj_id=141703&obj_type=PageObject&cmd=layout&cmdClass=illmpresentationgui&cmdNode=13g&baseClass=ilLMPresentationGUI
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.