A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
Unknown