The Forgotten Password functionality of Rocket TRUfusion Portal v7.9.2.1 allows remote malicious users to bypass authentication and access restricted pages by validating the user's session token when the "Password forgotten?" button is clicked.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
rocketsoftware trufusion enterprise |