Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-28597
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An attacker can visit the password reset supplying the password reset token to reset the password of an account of their choice.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
PRNG中使用可预测种子
Source: NVD (National Vulnerability Database)
Vulnerability Title
Epignosis EfrontPro 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Epignosis Efront Pro是美国 (Epignosis)公司的一个应用软件。提供最苛刻和最复杂的学习生态系统而设计的企业学习管理系统求。 Epignosis EfrontPro 5.2.21 存在安全漏洞,攻击者可利用该漏洞可以访问密码重置,提供密码重置令牌来重置他们选择的帐户的密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-Epignosis Epignosis eFront LMS 5.2.17, Epignosis eFront LMS 5.2.21 -
II. Public POCs for CVE-2020-28597
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2020-28597
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2020-28597

No comments yet


Leave a comment