Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dell Quest One Password Manager 权限许可和访问控制漏洞
Vulnerability Description
Dell Quest One Password Manager是美国戴尔(Dell)公司的一套密码管理软件。该软件允许终端用户重置遗忘的密码以及解锁账户,并支持实施安全的数据访问策略。 Dell Quest One Password Manager 5.0版本中存在安全漏洞。远程攻击者可通过发送带有有效的域名和用户名的登录请求利用该漏洞绕过CAPTCHA保护机制,获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A