Описание
Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of login requests, possibly related to the Webpac Pro submodule.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:iii:sierra:1.2_3:*:*:*:*:*:*:*
EPSS
Процентиль: 46%
0.0023
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
Innovative Interfaces Sierra Library Services Platform 1.2_3 provides different responses for login request depending on whether the user account exists, which allows remote attackers to enumerate account names via a series of login requests, possibly related to the Webpac Pro submodule.
EPSS
Процентиль: 46%
0.0023
Низкий
5 Medium
CVSS2
Дефекты
CWE-200