Field Assessment
AI analysis pending.
CVE
CVE-2014-2269
Severity
MEDIUM
CVSS
6.4
EPSS
15.78%
Original Filing — NVD Description
modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters.