Описание
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
Ссылки
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2025-04-01 (исключая)
cpe:2.3:a:tcman:gim:*:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.00072
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 5.3
github
2 месяца назад
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'.
EPSS
Процентиль: 22%
0.00072
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-862