An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack.
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.