CVE-2022-45637

Description

An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism.

Affected Platforms

Weakness Type

CWE-640, CWE-640

References

• https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637
• https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637
• https://github.com/WithSecureLabs/megafeis-palm/tree/main/CVE-2022-45637