NVD

Id
86082  
Name
CVE-2017-8827  
Description
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-05-27  
Published
2017-05-08  
Modified Date
2017-05-12  
Seq
2017-8827  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419012 86082 CVE-2017-6602 97472  View
419013 86082 CVE-2017-6602 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cli2  View
422676 86082 CVE-2017-0505 https://source.android.com/security/bulletin/2017-03-01  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67399 JVNDB-2017-003696 GeniXCMS の forgotpassword.php におけるサービス運用妨害 (DoS) の脆弱性 GeniXCMS の forgotpassword.php は、レートの制限がないため、サービス運用妨害 (ログイン不可) 状態にされる、または 任意のユーザのパスワードをリセットする攻撃を実行される脆弱性が存在します。 CVE-2017-8827 0 CVE-2017-8827 86082 6.4 9.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003696.html 2017-05-05 2017-06-05 View