critical9.8
CVE-2022-44938
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Impact
Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seeddms | Seeddms | Versions 5.1.7, 6.0.20 |