Weak Password Recovery Mechanism for Forgotten Password in Navigate CMS - CVE-2020-14015
Published: June 24, 2020 / Updated: August 8, 2020
Vulnerability identifier: #VU34195
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-14015
CWE-ID: CWE-640
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to manipulate data.
An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no activation code is supplied. The system will allow an unauthorized user to continue setting a password, even though no activation code was supplied, setting the password for the most recently created user in the system (the user with the highest user id).
Affected software
Navigate CMS
How to mitigate CVE-2020-14015
Install update from vendor's website.