CVE-2023-34357 - CVE House
Back to Database
Status published High CVE-2023-34357

Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password

Vulnerability Description

Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will remain valid after the password has been reset and after the expected expiration date. An attacker with access to the browser history or has the line can thus use the URL again to change the password in order to take over the account.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-34357

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Soar Cloud Ltd.

View all reports →

Affected Software

HR Portal
Vulnerable Versions:
7.3.2023.0510, 7.3.2023.0705

Timeline

Official Publish: September 7th, 2023
Last Modified: September 26th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-640

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.