Vulnerability — CVE-2022-44004

CVE-2022-44004

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-44004
Description:: An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password.
Last updated date:: 11/20/2022

Type:: exploit
Confidence:: HIGH
Date of publishing:: 11/20/2022
Reference url to background: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-030.txt