Vulnerability Spotlight: Password reset vulnerability in Epignosis eFront
Cisco Talos disclosed a password reset authentication bypass in Epignosis eFront, tracked as TALOS-2020-1221/CVE-2020-28597, where an attacker who predicts the password reset seed can generate a valid one-time token and reset the password of any account of...