NetSight
IP …
critical9.8

CVE-2023-36487

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

Impact

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

Affected products

VendorProductAffected versions
IliasIlias
from 7.0 through 7.20
from 8.0 through 8.1

Weakness classification

CWE-640

References