6.2 Medium
AI Score
Confidence
High
0.014 Low
EPSS
Percentile
86.7%
In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.
packetstormsecurity.com/files/165327/Cibele-Thinfinity-VirtualUI-2.5.41.0-User-Enumeration.html
github.com/cybelesoft/virtualui/issues/1