Vulnerability in Lepide Active Directory Self Service

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request.

EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.

Affected products

Lepide Active_directory_self_service
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_BID)