← All advisories

Critical severity9.8NVD Advisory· Published Dec 8, 2022· Updated Jun 17, 2026

CVE-2022-44938

CVE-2022-44938

Description

Weak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Seeddms/Seeddms4 versions
cpe:2.3:a:seeddms:seeddms:5.1.7:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:seeddms:seeddms:5.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:seeddms:seeddms:6.0.20:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: v6.0.20, v5.1.7

Patches

Vulnerability mechanics

References

1

pwnit.io/2022/11/23/weak-password-reset-token-leads-to-account-takeover-in-seeddms/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.