CVE-2023-43902 - Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token

Back Back to CVE browser

CRITICAL

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token

Published Nov 14, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.83%

Description

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrator privileges via a crafted password reset token.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-640

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-48262
Advisory
https://secpro.co/blog/cve-2023-43902
https://secpro.llc/emsigner-cve-2/
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-48262		Advisory
https://secpro.co/blog/cve-2023-43902
https://secpro.llc/emsigner-cve-2/		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 14, 2023

Updated Aug 28, 2026

Reserved Sep 25, 2023

Link CVE-2023-43902

CISA Vulnrichment

Updated Aug 28, 2026

NVD

Status Modified

Modified Aug 28, 2026

Link CVE-2023-43902

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Nov 14, 2023

Updated Aug 28, 2026

Link EUVD-2023-48262

GitHub

No data