CVE-2022-21934 — Metasys Unverified Password Change
Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 …
Published: 2022-05-06 · CVSS: 8.0 · CVSS 3.1
Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7