{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-05-06T00:00:00", "descriptions": [{"lang": "en", "value": "The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "VU#602801", "tags": ["third-party-advisory", "x_refsource_CERT-VN"], "url": "http://www.kb.cert.org/vuls/id/602801"}, {"tags": ["x_refsource_MISC"], "url": "http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html"}, {"name": "20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/511176/100/0/threaded"}, {"name": "40003", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/40003"}, {"name": "39740", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/39740"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-1910", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "VU#602801", "refsource": "CERT-VN", "url": "http://www.kb.cert.org/vuls/id/602801"}, {"name": "http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html", "refsource": "MISC", "url": "http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html"}, {"name": "20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/511176/100/0/threaded"}, {"name": "40003", "refsource": "BID", "url": "http://www.securityfocus.com/bid/40003"}, {"name": "39740", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/39740"}, {"name": "http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf", "refsource": "CONFIRM", "url": "http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-1910", "datePublished": "2010-05-11T23:00:00", "dateReserved": "2010-05-11T00:00:00", "dateUpdated": "2018-10-10T18:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:consona:consona_dynamic_agent:-:-:enterprise:*:*:*:*:*", "matchCriteriaId": "3E86DC4D-1E5C-4284-AA49-FD5F3AA9056A", "vulnerable": true}, {"criteria": "cpe:2.3:a:consona:consona_dynamic_agent:-:-:marketing:*:*:*:*:*", "matchCriteriaId": "76A93E2B-D458-43A4-A4A5-9FA0981B72EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:consona:consona_dynamic_agent:-:-:support:*:*:*:*:*", "matchCriteriaId": "F1AAF4CD-3D1A-4C44-8338-4F614E4645CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:consona:consona_live_assistance:*:*:*:*:*:*:*:*", "matchCriteriaId": "EDD3CC62-BB8B-435F-A9F3-CD6DE608F463", "vulnerable": true}, {"criteria": "cpe:2.3:a:consona:consona_subscriber_assistance:*:*:*:*:*:*:*:*", "matchCriteriaId": "1F445B64-34D5-4372-9861-2216442E4069", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields."}, {"lang": "es", "value": "La implementaci\u00f3n Forgot Password en Consona Live Assistance, Dynamic Agent y Subscriber Assistance permite a atacantes remotos resetear passwords de cuentas con las pregusta y respuesta secreta en blanco mediante el envio de un valor vac\u00edo para cada uno de \u00e9stos dos campos."}], "id": "CVE-2010-1910", "lastModified": "2018-10-10T19:57:58.750", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-05-12T11:46:31.703", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/39740"}, {"source": "cve@mitre.org", "url": "http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf"}, {"source": "cve@mitre.org", "tags": ["Patch", "US Government Resource"], "url": "http://www.kb.cert.org/vuls/id/602801"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/511176/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/40003"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}