Kompini

INCIBE-CERT Reports Critical Tankuam Places Account Takeover Flaw

Tankuam Places password-recovery tokens could reset other users' accounts, including administrators. Kompini reports a service-side correction; obtain confirmation that your deployment is covered and review suspicious reset activity rather than seeking a downloadable patch.