MAXHUB Pivot Weak Password Reset Vulnerability Allowing Account Takeover

A vulnerability exists in the password reset mechanism of the MAXHUB Pivot client application, all versions prior to v1.36.2. This weakness may enable an attacker to take over a user's account by exploiting the flawed password recovery process.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user accounts by allowing attackers to reset passwords and gain control over the accounts.

Remediation

Users are advised to upgrade the MAXHUB Pivot client application to version 1.36.2 or newer. For more information, visit the MAXHUB support page.