Authentication flaw

2016-07-1516:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.3%

JSON

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts.

CPENameOperatorVersion
lighthouse_smsle5.1

CPE	Name	Operator	Version
	lighthouse_sms	le	5.1

References

www.securityfocus.com/bid/91728

ics-cert.us-cert.gov/advisories/ICSA-16-194-01