CoreCVE
Back

MEDIUM

An issue was discovered in One Identity Password Manager 5.8

Published Nov 13, 2020

Description

An issue was discovered in One Identity Password Manager 5.8. An attacker could enumerate valid answers for a user. It is possible for an attacker to detect a valid answer based on the HTTP response content, and reuse this answer later for a password reset on a chosen password. The enumeration is possible because, within the HTTP response content, WRONG ID is only returned when the answer is incorrect.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-203

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 13, 2020
Updated Aug 4, 2024
Reserved Jan 24, 2020
Link CVE-2020-7962
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-7962
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-7962
ENISA EUVD
Assigner mitre
Published Nov 13, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-28881
EUVD-2020-28881