CVE-2019-13240
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without a…
Published: 2019-07-10 · CVSS: Unscored
An issue was discovered in GLPI before 9.4.1. After a successful password reset by a user, it is possible to change that user's password again during the next 24 hours without any information except the associated email address.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7