CVE-2010-1910

critical

Description

The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields.

References

http://www.securityfocus.com/bid/40003

http://www.securityfocus.com/archive/1/511176/100/0/threaded

http://www.kb.cert.org/vuls/id/602801

http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf

http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html

http://secunia.com/advisories/39740

Details

Source: Mitre, NVD

Published: 2010-05-12

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.01066