A flaw in Gliffy results in broken authentication through the reset functionality of the application.
CWE-287