CWE-620.

vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php

• vtenext
• CWE-620

phpMyAdmin through 5.2.3 Two-Factor Authentication Removal via /config/set

• phpMyAdmin
• CWE-620

OmniRoute 3.8.0 before 3.8.52 Unverified Password Change via /api/settings/require-login

• cheaper-inference OmniRoute
• CWE-620

Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

• Linksys WAG200G
• CWE-620

ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password

• ProjectSend
• CWE-620

MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

• MariaDB server
• Broken access control
• CWE-620

Gotify: Insufficiently Protected Password Change endpoint

• CWE-620

<=2.9.1 · no fixed version yet

FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification

• error311 FileRise
• Authentication bypass
• CWE-620

Joplin Server password reset accepts tokens issued for unrelated purposes

• laurent22 joplin
• CWE-620
• CWE-640

microservices-platform through 6.0.0 Unverified Password Change via /users/password

• zlt2000 microservices-platform
• CWE-620

pig before 4.1.0 Unverified Password Change via /register/password

• pig
• CWE-620

sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change

• sfturing hosp_order
• CWE-620
• CWE-640

phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change

• thorsten phpMyFAQ
• CWE-620

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

• Cross-site request forgery (CSRF)
• CWE-620

<0.0.0-20260707190631-c59c3dc9035b · fixed in 0.0.0-20260707190631-c59c3dc9035b

Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition

• PTC Windchill Risk and Reliability Enterprise Edition (Formerly Relex)
• Authentication bypass
• CWE-620

Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check

• Authentication bypass
• CWE-620

>=6.0.0, <6.8.14 || >=7.0.0, <7.0.38 · fixed in 6.8.14, 7.0.38

Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

• CWE-620

<6.8.11 || >=7.0.0-alpha.1, <7.0.34 · fixed in 6.8.11, 7.0.34

WeGIA < 3.9.2 Authorization Bypass Password Change via alterarSenha

• LabRedesCefetRJ WeGIA
• Broken access control
• CWE-620

Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint

• Sonatype Nexus Repository 3
• CWE-620

Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change

• britcoder Single Sign On For TNG
• CWE-620

Poweradmin: API user-update endpoint leads to a non-admin reset any user's password and take over the superuser account

• Broken access control
• CWE-620

>=4.0.0, <4.2.5 || >=4.3.0, <4.3.4 · fixed in 4.2.5, 4.3.4

Improper Authentication in Vimesoft's Enterprise Video Platform

• Vimesoft Inc. Enterprise Video Platform
• CWE-620

Capgo - Authentication Bypass in Password Change via Missing Current Password Validation

• Capgo
• CWE-620

Siemens CPCI85 Central Processing/Communication: A vulnerability has been identified in CPCI85 Central Processing/Communication (All…

• Siemens CPCI85 Central Processing/Communication
• Siemens SICORE Base system
• CWE-620

OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements

• opf openproject
• CWE-620

OpenAM Account Takeover via Unverified Password Change in OAuth2 Module

• Hard-coded credentials
• CWE-620

<16.1.1 · fixed in 16.1.1

KMW CCTV Security Cameras Unverified Password Change

• KMW KM-IP521
• KMW KM-IP421
• CWE-620

Devolutions Server: Unverified password change in Devolutions Server allows an attacker to change a user's…

• Devolutions Server
• CWE-620

Concrete CMS has a session-hardening bypass and allows password change without reauthorization

• Privilege escalation
• Broken access control

<9.5.1 · fixed in 9.5.1

OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence

• CWE-620

<6.10.5 || >=7.0.0.pre.rc1, <7.0.0-rc3 · fixed in 6.10.5, 7.0.0-rc3

blueprintUE: Authenticated Password Change Does Not Verify Current Password

• blueprintue-self-hosted-edition
• CWE-620

Navicat for Oracle 12.1.15 Password Field Denial of Service

• Navicat for Oracle
• CWE-620

An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.

• CWE-620

Lantronix EDS3000PS Unverified Password Change

• Lantronix EDS3000PS series
• Command injection
• Authentication bypass

Lantronix EDS3000PS OS Command Injection

• Lantronix EDS3000PS series
• Command injection
• Authentication bypass

SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change

• Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS
• CWE-620

EventSentry < 6.0.1.20 Web Reports Unverified Password Change

• NETIKUS.NET ltd EventSentry
• CWE-620

vichan-devel vichan Password Change pages.php unverified password change

• vichan
• CWE-620
• CWE-640

Tenda W30E V2 Allows Password Changes Without Verifying Current Password

• Shenzhen Tenda Technology Co., Ltd. W30E V2
• CWE-620

Unverified Password Change in Weintek cMT X Series HMI EasyWeb Service

• Weintek cMT3072XH
• Weintek cMT3072XH(T)
• CWE-620

MOVEit Transfer REST API does not require current password in order to initiate the password change process

• Progress MOVEit Transfer
• CWE-620

IBM Aspera Orchestrator Unverified Password Change

• IBM Aspera Orchestrator
• CWE-620

Ibexa User Bundle is missing password change validation

• CWE-620

>=5.0.0-beta1, <5.0.4 · fixed in 5.0.4

Fortinet FortiSOAR on-premise: An unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR…

• Fortinet FortiSOAR on-premise
• Fortinet FortiSOAR PaaS
• CWE-620

Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to set the Administrator password and username as bl…

• CWE-620

Flowise does not Prevent Bypass of Password Confirmation - Unverified Password Change

• Authentication bypass
• CWE-620

<3.0.10 · fixed in 3.0.10

Flowise doesn't Prevent Bypass of Password Confirmation through Unverified Email Change (credentials)

• Authentication bypass
• CWE-620

<3.0.10 · fixed in 3.0.10

A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of…

• CWE-620

Matrix Authentication Service account password can be changed using an authenticated session without supplying the current password

• element-hq matrix-authentication-service
• CWE-620

FelixRiddle dev-jobs-handlebars 1.0 uses absolute password-reset (magic) links using the untrusted `req.headers.host` header and forces the `http://` scheme.

• CWE-620

Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to reset a user's password.

• CWE-620

Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password

• hancock11 Appy Pie Connect for WooCommerce
• CWE-620

Sophos AP6 Series Wireless Access Points: An authentication bypass vulnerability allows remote attackers to gain administrative…

• Sophos AP6 Series Wireless Access Points
• CWE-620

CWE-620: Unverified Password Change

• Emby MediaBrowser
• CWE-620

Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

• uxper Sala - Startup & SaaS WordPress Theme
• CWE-620

DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset

• scriptsbundle DWT - Directory & Listing WordPress Theme
• CWE-620

UTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change

• UTT 进取 750W
• CWE-620
• CWE-640

Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

• sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
• CWE-620

TYPO3 Unverified Password Change for Backend Users

• CWE-620

>=9.0.0, <9.5.51 || >=10.0.0, <10.4.50 || >=11.0.0, <11.5.44 || >=12.0.0, <12.4.31 || >=13.0.0, <13.4.12 · fixed in 9.5.51, 10.4.50, 11.5.44, 12.4.31, 13.4.12

Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover

• StylemixThemes Motors - Car Dealer, Rental & Listing WordPress theme
• CWE-620