CVE-2022-26314

A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Appstore module (Mendix 7 compatible) (All versions < V3.2.2). Initial passwords are generated in an insecure manner. This could allow an unauthenticated remote attacker to efficiently brute force passwords in specific situations.
References
Configurations

Configuration 1

cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*
cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*

Information

Published : 2022-03-08 12:15

Updated : 2022-03-11 07:04


NVD link : CVE-2022-26314

Mitre link : CVE-2022-26314

Products Affected
No products.
CWE
CWE-307

Improper Restriction of Excessive Authentication Attempts