VDB

GCVE-110-CERTCC-2015-757840

GCVE-110-CERTCC-2015-757840
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published December 18, 2015
Dovestones Software AD Self Password Reset, version 3.0.3.0 and earlier, fails to properly validate users, which enables an unauthenticated attacker to reset passwords for arbitrary accounts.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score5.9remediation_levelOFreport_confidenceCenvironmental_score1.46512201740581target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2015-8267

References

Dovestones Software AD Self Password Reset fails to properly restrict password reset request to authorized users
url
Dovestones Software AD Self Password Reset fails to properly restrict password reset request to authorized users
url
Dovestones Software AD Self Password Reset fails to properly restrict password reset request to authorized users
url
Dovestones Software AD Self Password Reset fails to properly restrict password reset request to authorized users
advisory

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›