PMWeb Weak Password Policy Vulnerability

A vulnerability in PMWeb version 7.2.0 has been identified, specifically within the Setting Handler component. This vulnerability introduces weak password requirements, potentially allowing for easier unauthorized access. The issue can be exploited remotely, although the complexity of the attack is considered high, making exploitation difficult.

Impact

Exploitation of this vulnerability could lead to unauthorized access due to weak password policies, allowing attackers to bypass authentication mechanisms.

Remediation

Users are advised to review and modify configuration settings to enforce stronger password policies.