# CWE-640.

Every Advisory and CVE whose sources give the weakness CWE-640, newest first.

## Records, newest first (an older page)

- [A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link.](https://agentprime.io/advisories/CVE-2024-42915.md)
  `CVE-2024-42915` · CVE record · CVSS 8.0 High · Not analysed yet · Published 23 Aug 2024 · Tags: CWE-640
- [HaloITSM - Password Reset Poisoning](https://agentprime.io/advisories/CVE-2024-6203.md)
  `CVE-2024-6203` · CVE record: Halo Service Solutions HaloITSM · CVSS 8.3 High · Not analysed yet · Published 6 Aug 2024 · Tags: CWE-640
- [The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's…](https://agentprime.io/advisories/CVE-2024-38287.md)
  `CVE-2024-38287` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jul 2024 · Tags: CWE-640
- [Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism](https://agentprime.io/advisories/CVE-2024-6125.md)
  `CVE-2024-6125` · CVE record: glboy OTP Login With Phone Number, OTP Verification · CVSS 8.1 High · Not analysed yet · Published 19 Jun 2024 · Tags: CWE-640
- [Shenzhen Guoxin Synthesis image system before 8.3.0 allows unauthorized password resets via the resetPassword API.](https://agentprime.io/advisories/CVE-2024-38468.md)
  `CVE-2024-38468` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2024 · Tags: CWE-640
- [Keycloak Denial of Service via account lockout](https://agentprime.io/advisories/GHSA-cq42-vhv7-xr7p.md)
  `GHSA-cq42-vhv7-xr7p`, `CVE-2024-1722` · Maven `org.keycloak:keycloak-services`: affected `<24.0.0`, fixed in `24.0.0` · CVSS 3.7 Low · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-640, CWE-645
- [Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism](https://agentprime.io/advisories/CVE-2023-7264.md)
  `CVE-2023-7264` · CVE record: hakeemnala Build App Online · CVSS 8.1 High · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-640
- [SuiteCRM unauthenticated user password reset on php7](https://agentprime.io/advisories/CVE-2024-36407.md)
  `CVE-2024-36407` · CVE record: salesagility SuiteCRM · CVSS 3.7 Low · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-640
- [Weak Password Recovery Mechanism in lunary-ai/lunary](https://agentprime.io/advisories/CVE-2024-5277.md)
  `CVE-2024-5277` · CVE record: lunary-ai lunary-ai/lunary · CVSS 6.4 Medium · Not analysed yet · Published 6 Jun 2024 · Tags: CWE-640
- [ifm: moneo prone to weak password recovery mechanism](https://agentprime.io/advisories/CVE-2024-5404.md)
  `CVE-2024-5404` · CVE record: ifm moneo appliance QVA200 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jun 2024 · Tags: CWE-640
- [TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-35717.md)
  `CVE-2023-35717` · CVE record: TP-Link Tapo C210 · CVSS 8.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-640
- [In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the disclosure of the meeting password when a user is invited to a call after waiting…](https://agentprime.io/advisories/CVE-2024-33530.md)
  `CVE-2024-33530` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 May 2024 · Tags: CWE-640
- [Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine](https://agentprime.io/advisories/CVE-2024-27899.md)
  `CVE-2024-27899` · CVE record: SAP_SE SAP NetWeaver AS Java User Management Engine · CVSS 8.8 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-640
- [Weak password recovery mechanism in CDeX](https://agentprime.io/advisories/CVE-2024-2463.md)
  `CVE-2024-2463` · CVE record: CDeX PSA CDeX · CVSS 8.0 High · Not analysed yet · Published 21 Mar 2024 · Tags: CWE-640
- [Weak password recovery in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2024-24903.md)
  `CVE-2024-24903` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 8.0 High · Not analysed yet · Published 1 Mar 2024 · Tags: CWE-640
- [Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers](https://agentprime.io/advisories/GHSA-mwhf-6mjm-6w3h.md)
  `GHSA-mwhf-6mjm-6w3h`, `CVE-2021-29038` · Maven `com.liferay:com.liferay.login.web` and 4 more: affected `<5.0.18`, fixed in `5.0.18` · CVSS 6.3 Medium · Not analysed yet · Published 21 Feb 2024 · Tags: CWE-640
- [Weak password recovery in Dell PowerProtect Data Manager](https://agentprime.io/advisories/CVE-2024-22454.md)
  `CVE-2024-22454` · CVE record: Dell PowerProtect Data Manager · CVSS 8.8 High · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-640
- [Huaxia ERP UserController.java password recovery](https://agentprime.io/advisories/CVE-2024-0491.md)
  `CVE-2024-0491` · CVE record: Huaxia ERP · CVSS 5.3 Medium · Not analysed yet · Published 13 Jan 2024 · Tags: CWE-640
- [Weak Password Recovery Mechanism for Forgotten Password in GitLab](https://agentprime.io/advisories/CVE-2023-7028.md)
  `CVE-2023-7028` · CVE record: GitLab GitLab · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.94 · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-640
- [ForU CMS password recovery](https://agentprime.io/advisories/CVE-2024-0425.md)
  `CVE-2024-0425` · CVE record: ForU CMS · CVSS 5.3 Medium · Not analysed yet · Published 11 Jan 2024 · Tags: CWE-640
- [WWBN AVideo recovery notification bypass vulnerability](https://agentprime.io/advisories/GHSA-8m5f-2xvp-2c8w.md)
  `GHSA-8m5f-2xvp-2c8w`, `CVE-2023-50172`, `PKSA-bpdw-n2tk-hn54` · Packagist `wwbn/avideo`: affected `<=12.4`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-640
- [Weak password recovery in WWBN AVideo](https://agentprime.io/advisories/CVE-2023-49589.md)
  `CVE-2023-49589` · CVE record: WWBN AVideo · CVSS 8.8 High · Not analysed yet · Published 10 Jan 2024 · Tags: CWE-640
- [HuiRan Host Reseller System HTTP POST Request password recovery](https://agentprime.io/advisories/CVE-2024-0186.md)
  `CVE-2024-0186` · CVE record: HuiRan Host Reseller System · CVSS 3.7 Low · Not analysed yet · Published 2 Jan 2024 · Tags: CWE-640
- [Improper Access Control vulnerability in SAP Commerce Cloud](https://agentprime.io/advisories/CVE-2023-42481.md)
  `CVE-2023-42481` · CVE record: SAP_SE SAP Commerce Cloud · CVSS 8.1 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-640
- [ZITADEL Account Takeover via Malicious Host Header Injection](https://agentprime.io/advisories/GHSA-2wmj-46rj-qm2w.md)
  `GHSA-2wmj-46rj-qm2w`, `CVE-2023-49097` · Go `github.com/zitadel/zitadel`: affected `>=2.39.0, <2.39.9 || >=2.40.0, <2.40.10 || >=2.41.0, <2.41.6`, fixed in `2.39.9`, `2.40.10`, `2.41.6` · CVSS 8.1 High · Not analysed yet · Published 29 Nov 2023 · Tags: CWE-640
- [Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts of all registered users, including those with administrato…](https://agentprime.io/advisories/CVE-2023-43902.md)
  `CVE-2023-43902` · CVE record · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-640
- [Byzoro Smart S85F Management Platform login.php password recovery](https://agentprime.io/advisories/CVE-2023-5959.md)
  `CVE-2023-5959` · CVE record: Byzoro Smart S85F Management Platform · CVSS 4.3 Medium · Not analysed yet · Published 11 Nov 2023 · Tags: CWE-640
- [PILOS account takeover through password reset poisoning](https://agentprime.io/advisories/CVE-2023-47107.md)
  `CVE-2023-47107` · CVE record: THM-Health PILOS · CVSS 8.8 High · Not analysed yet · Published 8 Nov 2023 · Tags: CWE-20, CWE-640
- [JumpServer default admin user email leak password reset](https://agentprime.io/advisories/CVE-2023-46138.md)
  `CVE-2023-46138` · CVE record: jumpserver jumpserver · CVSS 3.7 Low · Not analysed yet · Published 30 Oct 2023 · Tags: CWE-640
- [Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack](https://agentprime.io/advisories/CVE-2023-5840.md)
  `CVE-2023-5840` · CVE record: linkstackorg linkstackorg/linkstack · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2023 · Tags: CWE-640
- [ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting](https://agentprime.io/advisories/GHSA-v683-rcxx-vpff.md)
  `GHSA-v683-rcxx-vpff`, `CVE-2023-44399` · Go `github.com/zitadel/zitadel`: affected `<2.37.3`, fixed in `2.37.3` · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-640
- [Xinhu RockOA Password password recovery](https://agentprime.io/advisories/CVE-2023-5296.md)
  `CVE-2023-5296` · CVE record: Xinhu RockOA · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2023 · Tags: CWE-640
- [Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver](https://agentprime.io/advisories/CVE-2023-43650.md)
  `CVE-2023-43650` · CVE record: jumpserver jumpserver · CVSS 8.2 High · Not analysed yet · Published 27 Sept 2023 · Tags: CWE-640
- [Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password](https://agentprime.io/advisories/CVE-2023-34357.md)
  `CVE-2023-34357` · CVE record: Soar Cloud Ltd. HR Portal · CVSS 7.8 High · Not analysed yet · Published 7 Sept 2023 · Tags: CWE-640
- [Vulnerability in the password recovery mechanism of Roundcube Password Recovery Plugin](https://agentprime.io/advisories/CVE-2023-3222.md)
  `CVE-2023-3222` · CVE record: AlfnRU Password Recovery Plugin · CVSS 7.5 High · Not analysed yet · Published 4 Sept 2023 · Tags: CWE-640
- [OpenRapid RapidCMS run-movepass.php password recovery](https://agentprime.io/advisories/CVE-2023-4448.md)
  `CVE-2023-4448` · CVE record: OpenRapid RapidCMS · CVSS 6.3 Medium · Not analysed yet · Published 21 Aug 2023 · Tags: CWE-640
- [Weintek Weincloud Weak Password Recovery Mechanism for Forgotten Password](https://agentprime.io/advisories/CVE-2023-35134.md)
  `CVE-2023-35134` · CVE record: Weintek Weincloud · CVSS 7.4 High · Not analysed yet · Published 19 Jul 2023 · Tags: CWE-640
- [The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution.](https://agentprime.io/advisories/CVE-2023-29145.md)
  `CVE-2023-29145` · CVE record · No CVSS score · Not analysed yet · Published 30 Jun 2023 · Tags: CWE-640
- [The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.](https://agentprime.io/advisories/CVE-2023-36487.md)
  `CVE-2023-36487` · CVE record · No CVSS score · Not analysed yet · Published 29 Jun 2023 · Tags: CWE-640
- [Weak password recovery in Apple macOS and others](https://agentprime.io/advisories/CVE-2023-28202.md)
  `CVE-2023-28202` · CVE record: Apple macOS and 3 more · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-640
- [Weak password recovery in Apple macOS](https://agentprime.io/advisories/CVE-2022-42807.md)
  `CVE-2022-42807` · CVE record: Apple macOS · No CVSS score · Not analysed yet · Published 23 Jun 2023 · Tags: CWE-640
- [ningzichun Student Management System Password Reset resetPassword.php password recovery](https://agentprime.io/advisories/CVE-2023-3007.md)
  `CVE-2023-3007` · CVE record: ningzichun Student Management System · CVSS 6.5 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-640
- [A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier could allow an unauthenticated attacker with internal network access to authenticat…](https://agentprime.io/advisories/CVE-2023-31459.md)
  `CVE-2023-31459` · CVE record · CVSS 8.8 High · Not analysed yet · Published 24 May 2023 · Tags: CWE-640
- [Missing rate limit for password resets](https://agentprime.io/advisories/GHSA-ph6g-6v8w-8p6m.md)
  `GHSA-ph6g-6v8w-8p6m`, `CVE-2023-28821`, `PKSA-1mgj-tr57-r1f7` · Packagist `concrete5/concrete5`: affected `<9.1.0`, fixed in `9.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 28 Apr 2023 · Tags: CWE-640
- [Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)](https://agentprime.io/advisories/CVE-2023-30466.md)
  `CVE-2023-30466` · CVE record: Milesight NVR MS-Nxxxx-xxG and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Apr 2023 · Tags: CWE-640
- [Insufficient token expiration in Serenity](https://agentprime.io/advisories/GHSA-2hp9-3xfr-r9w2.md)
  `GHSA-2hp9-3xfr-r9w2`, `CVE-2023-31287` · NuGet `Serenity.Net.Core` and 1 more: affected `<6.7.0`, fixed in `6.7.0` · CVSS 7.8 High · Not analysed yet · Published 27 Apr 2023 · Tags: CWE-640
- [An issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email addresses and user entered information via submission to the forgotten-password endpoint.](https://agentprime.io/advisories/CVE-2021-36436.md)
  `CVE-2021-36436` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-640
- [An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.](https://agentprime.io/advisories/CVE-2022-45637.md)
  `CVE-2022-45637` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Mar 2023 · Tags: CWE-640
- [COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover.](https://agentprime.io/advisories/CVE-2022-47697.md)
  `CVE-2022-47697` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jan 2023 · Tags: CWE-640
- [Password reset interception via API](https://agentprime.io/advisories/CVE-2022-26872.md)
  `CVE-2022-26872` · CVE record: AMI MegaRAC SPx-12 and 1 more · CVSS 8.3 High · Not analysed yet · Published 30 Jan 2023 · Tags: CWE-640
- [gitter-badger ezpublish-modern-legacy forgotpassword.php password recovery](https://agentprime.io/advisories/CVE-2015-10071.md)
  `CVE-2015-10071` · CVE record: gitter-badger ezpublish-modern-legacy · CVSS 2.6 Low · Not analysed yet · Published 19 Jan 2023 · Tags: CWE-640
- [In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.](https://agentprime.io/advisories/CVE-2020-12067.md)
  `CVE-2020-12067` · CVE record · CVSS 7.5 High · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-640
- [Weak Password Recovery in ifm moneo appliance](https://agentprime.io/advisories/CVE-2022-3485.md)
  `CVE-2022-3485` · CVE record: ifm moneo appliance · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Dec 2022 · Tags: CWE-640
- [An issue was discovered in BACKCLICK Professional 5.9.63.](https://agentprime.io/advisories/CVE-2022-44004.md)
  `CVE-2022-44004` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Nov 2022 · Tags: CWE-640
- [Weak password recovery in Schneider Electric EcoStruxure Control Expert and others](https://agentprime.io/advisories/CVE-2022-37300.md)
  `CVE-2022-37300` · CVE record: Schneider Electric EcoStruxure Control Expert and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2022 · Tags: CWE-640
- [Liferay Portal and Liferay DXP insecure default configuration](https://agentprime.io/advisories/GHSA-jfch-m2x3-2v66.md)
  `GHSA-jfch-m2x3-2v66`, `CVE-2021-33321` · Maven `com.liferay.portal:com.liferay.portal.impl` and 1 more: affected `<5.11.0`, fixed in `5.11.0` · CVSS 7.5 High · Not analysed yet · Published 24 May 2022 · Tags: CWE-640
- [Mattermost Server password reset email requests can be sent to attacker-provided email addresses](https://agentprime.io/advisories/GHSA-34cx-hvm4-vx7j.md)
  `GHSA-34cx-hvm4-vx7j`, `CVE-2017-18908`, `GO-2026-4476` · Go `github.com/mattermost/mattermost-server`: affected `<3.9.1-rc1 || >=3.10.0, <3.10.1`, fixed in `3.9.1-rc1`, `3.10.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: Authentication bypass, CWE-640
- [Craft CMS possibility of brute force attempts](https://agentprime.io/advisories/GHSA-wvr4-w6cw-4px8.md)
  `GHSA-wvr4-w6cw-4px8`, `CVE-2019-15929`, `PKSA-1y5n-q5z7-8cgs` · Packagist `craftcms/cms`: affected `<3.1.7`, fixed in `3.1.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2022 · Tags: CWE-640
- [Predictable password reset token may lead to account takeover in countly-server](https://agentprime.io/advisories/CVE-2022-29174.md)
  `CVE-2022-29174` · CVE record: Countly countly-server · CVSS 8.1 High · Not analysed yet · Published 17 May 2022 · Tags: CWE-640
- [Craft CMS subject to URL forgery](https://agentprime.io/advisories/GHSA-j27g-r58q-624w.md)
  `GHSA-j27g-r58q-624w`, `CVE-2017-8385`, `PKSA-2z2h-k3wy-w25s` · Packagist `craftcms/cms`: affected `<2.6.2976`, fixed in `2.6.2976` · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2022 · Tags: CWE-640

Newest: <https://agentprime.io/advisories/tag/cwe-640.md>
Older: <https://agentprime.io/advisories/tag/cwe-640.md?cursor=WyIyMDIyLTA1LTE3VDAyOjQ2OjEwLjAwMDAwMFoiLCJHSFNBLWoyN2ctcjU4cS02MjR3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-640&cursor=WyIyMDI0LTA5LTExVDE4OjMxOjA4LjYzODAwMFoiLCJDVkUtMjAyNC04NjkyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-640/?cursor=WyIyMDI0LTA5LTExVDE4OjMxOjA4LjYzODAwMFoiLCJDVkUtMjAyNC04NjkyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.