Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning.
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
Link | Tags |
---|---|
https://teampasswordmanager.com/docs/changelog/#10.135.236 | vendor advisory |
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-060.txt | broken link |