CVE-2023-2807

Summary

CVE-2023-2807 is a critical authentication bypass vulnerability affecting the password reset process of Pandora FMS. An unauthenticated attacker can exploit this spoofing weakness to trigger a password reset for any user account without proper authentication. This issue poses a significant risk to security, particularly in versions 771 and prior of PandoraFMS on all supported platforms. Successful exploitation grants attackers the ability to manipulate user accounts, potentially leading to unauthorized access and system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.