Description
Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail address is known) by leveraging guest access and guessing a 6-digit number.
Remediation
References
Related Vulnerabilities
Jenkins Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-2101)
Apache Tomcat CVE-2026-24733 Vulnerability (CVE-2026-24733)
WordPress Plugin BookX Local File Inclusion (1.7)
MySQL CVE-2020-2924 Vulnerability (CVE-2020-2924)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2901)