VULNERABILITY INTELLIGENCE

CVE-2024-6890

CVSS score8.8 HIGH
EPSS probability0.72%
CISA KEVNot currently listed
Published2024-08-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

Weakness classification

  • bbf0bd87-ece2-41be-b873-96928ee8fab9: CWE-321
  • nvd@nist.gov: CWE-798

Primary references