Employee Task Management System security bypass | CVE-2023-0905
NAME
__________
Employee Task Management System security bypass
Platforms Affected:
Risk Level:
7.3
Exploitability:
Proof of Concept
Consequences:
Bypass Security
DESCRIPTION
__________
Employee Task Management System could allow a remote attacker to bypass security restrictions, caused by improper authentication in the changePasswordForEmployee.php script. An attacker could exploit this vulnerability to change all users’ passwords.
CVSS 3.0 Information
__________
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Access Vector:
Network
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon using the button below
![Employee Task Management System security bypass | CVE-2023-0905 1 Digital Patreon Wordmark FieryCoralv2](https://www.redpacketsecurity.com/wp-content/uploads/2021/01/Digital-Patreon-Wordmark_FieryCoralv2-1024x209.png)
To keep up to date follow us on the below channels.
![Employee Task Management System security bypass | CVE-2023-0905 2 join](https://www.redpacketsecurity.com/wp-content/uploads/2022/06/join.png)
![Employee Task Management System security bypass | CVE-2023-0905 3 discord](https://www.redpacketsecurity.com/wp-content/uploads/2022/06/discord.png)
![Employee Task Management System security bypass | CVE-2023-0905 4 reddit](https://www.redpacketsecurity.com/wp-content/uploads/2022/06/reddit-2000x690.png)
![Employee Task Management System security bypass | CVE-2023-0905 5 hd linkedin](https://www.redpacketsecurity.com/wp-content/uploads/2022/08/hd-linkedin.webp)