CVE-2021-28293 Auth bypass in n/a
Unauthenticated attackers can take over any user account by exploiting a misconfigured password reset feature in Seceon aiSIEM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-28293?
CVE-2021-28293 is a critical authentication bypass vulnerability in n/a, published on 8 Jun 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Seceon aiSIEM before 6.3.2 (build 585) is prone to an unauthenticated account takeover vulnerability in the Forgot Password feature. The lack of correct configuration leads to recovery of the password reset link generated via the password reset functionality, and thus an unauthenticated attacker can set an arbitrary password for any user.
Weakness: CWE-640
Which versions are affected by CVE-2021-28293?
It affects 1 product.
Products include Seceon Aisiem.
How do I fix CVE-2021-28293?
No fix has been published for CVE-2021-28293 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-28293 being exploited?
There is no known exploitation of CVE-2021-28293 in the wild and no public exploit code.
Sources
Also known as GHSA-xqx5-9rjr-cjq9.