← Back

Bt Ctroms Terminal Project

bt_ctroms_terminal_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Bt Ctroms Terminal
bt_ctroms_terminal
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-14930
1Bt Ctroms Terminal Project
1Bt Ctroms Terminal
Nov 21, 2024
Jun 19, 2020
N/A· v4
8.1 HIGH· v3
4.3 MEDIUM· v2
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is t...Show more
An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but is also transmitted to the unauthenticated HTTP client.Show less