Описание
An issue was discovered in the Forgot password function in Innovaphone PBX before 14r1 devices. It provides information about whether a user exists on a system.
Ссылки
- Third Party Advisory
- Not Applicable
- Release Notes
- Not Applicable
- Release Notes
Уязвимые конфигурации
Конфигурация 1Версия до 14r1 (исключая)
Одно из
cpe:2.3:a:innovaphone:innovaphone_pbx:*:*:*:*:*:*:*:*
cpe:2.3:a:innovaphone:innovaphone_pbx:14r1:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00163
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 5.3
github
почти 2 года назад
An issue was discovered on Innovaphone PBX before 14r1 devices. It provides different responses to incoming requests in a way that reveals information to an attacker.
EPSS
Процентиль: 38%
0.00163
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-200