漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: go to the Google ReCAPTCHA section, click on the Privacy link, observe that there is a new browser window, navigate to any website that offers file upload, navigate to cmd.exe from the file explorer window, and launch cmd.exe as NT AUTHORITY\SYSTEM.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
One Identity Password Manager 安全漏洞
Vulnerability Description
One Identity Password Manager是美国One Identity公司的一个用于提供身份验证的Web平台。 One Identity Password Manager 5.13.1之前版本存在安全漏洞。攻击者利用该漏洞能够在 Windows 客户端的登录屏幕上重置其 Active Directory 密码。
CVSS Information
N/A
Vulnerability Type
N/A