CVE-2023-34357 Vulnerability Details

  /     /     /  

CVE-2023-34357 Metadata Quick Info

CVE Published: 07/09/2023 | CVE Updated: 26/09/2024 | CVE Year: 2023
Source: twcert | Vendor: Soar Cloud Ltd. | Product: HR Portal
Status : PUBLISHED

---

CVE-2023-34357 Description

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.

Metrics

CVSS Version: 3.1 | Base Score: 7.8 HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

l➤ Exploitability Metrics:
    Attack Vector (AV)* LOCAL
    Attack Complexity (AC)* LOW
    Privileges Required (PR)* LOW
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* HIGH
    Integrity Impact (I)* HIGH
    Availability Impact (A)* HIGH

Weakness Enumeration (CWE)

CWE-ID: CWE-640
CWE Name: CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Source: Soar Cloud Ltd.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-50
CAPEC Description: CAPEC-50 Password Recovery Exploitation


Source: NVD (National Vulnerability Database).