CVE-2005-0288 in Payment Application

Summary

the change password functionality in bottomline webseries payment application does not require the old password when users enter a new password which could allow remote authenticated users to change other users passwords.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 02/10/2005
• Disclosure: 01/11/2005
• Moderation: VulDB entry created
• Entries: 1: VDB-23837
• CPE: ready
• CWE: CWE-287 (Unconfirmed)
• CVSS: 5.1
• EPSS: 0.00318
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0288
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0288
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0288/