VULNERABILITY INTELLIGENCE

CVE-2014-2269

CVSS score6.4 MEDIUM
EPSS probability15.66%
CISA KEVNot currently listed
Published2014-04-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references