The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (users full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and CaptchaResponse parameters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Quest_one_password_manager | Dell | 5.0 (including) | 5.0 (including) |