Ubuntu notice USN-8993-1 flags SOGo flaw in password reset links
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu security notice USN-8993-1 reports that SOGo builds password reset links from the client-supplied Origin header. A remote attacker could possibly use this to obtain password reset tokens and take over user accounts.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the SOGo update referenced in Ubuntu security notice USN-8993-1.
- Review recent password reset activity for signs of unexpected account changes.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Tue 3 NovemberUSN-8993-1: SOGo vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices