Ubuntu notice USN-8993-1 flags SOGo flaw in password reset links
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
SOGo, a web-based email and calendar server, can build password reset links using a value supplied by the visitor's browser. This could let an attacker obtain reset codes and take over user accounts.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Apply the SOGo update referenced in Ubuntu security notice USN-8993-1.
- Review recent password reset activity for signs of unexpected account changes.
Written by AI from the sources, checked against them
Full story timeline · 1 update
- Tue 3 NovemberUSN-8993-1: SOGo vulnerabilityUbuntu Security Notices
Who reported · 1 outlet
Ubuntu Security Notices