CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. See the original NVD description below for full technical details.
CVE
CVE-2020-28597
Severity
HIGH
CVSS
7.5
EPSS
1.03%
Original NVD Description
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.
Related CVEs
Other vulnerabilities affecting the same vendor(s)