CVE-2004-2198

2005-07-1004:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the “My Account” page.

References

www.osvdb.org/10663

www.securityfocus.com/bid/11363

www.securitytracker.com/alerts/2004/Oct/1011597.html

exchange.xforce.ibmcloud.com/vulnerabilities/17682