CVE-2024-6890 — Journyx Unauthenticated Password Reset Bruteforce
Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset an…
Published: 2024-08-07 · CVSS: 9.8 · CVSS 3.1
Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7