CVE-2011-4678

2011-12-0611:00:00

mitre

www.cve.org

one click orgs

password reset

remote attackers

user accounts

enumeration

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether the e-mail address is registered, which allows remote attackers to enumerate user accounts via a series of requests.