password_reset_client vulnerabilities

CVEs whose affected-version data names the password_reset_client package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-5354High· 8.8PoC

5y ago

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended …

▾ Midnightanixis · password_reset_clientEPSS 1.9%via NVD