Vulnerability in Bottomline Webseries Payment Application
CVE-2005-0288
The change password functionality in Bottomline Webseries Payment Application does not require the old password when users enter a new password, which could allow remote authenticated users to change other users' passwords.
EPSS: 0.007 (49.0th percentile) — read the EPSS interpretation.
Affected products
- Bottomline Webseries_payment_application — versions 4.0
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)