Published: 12/05/2010 Updated: 10/10/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 454

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote malicious users to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields.

Vulnerable Product	Search on Vulmon	Subscribe to Product
consona consona dynamic agent -
consona consona live assistance
consona consona subscriber assistance

Multiple Consona products suffered from a password reset security bypass vulnerability ...

Hi!! 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details cvemitreorg/cgi-bin/cvenamecgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/loginasp", had a commented access to the page that allowed to change the password of any user, with a link with text "Forgot your password" The link tha ...

CWE-287 http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html http://www.securityfocus.com/bid/40003 http://secunia.com/advisories/39740 http://www.kb.cert.org/vuls/id/602801 http://www.securityfocus.com/archive/1/511176/100/0/threaded https://nvd.nist.gov http://seclists.org/fulldisclosure/2018/Nov/57

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-1910

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect