Lucene search
PRIOn knowledge basePRION:CVE-2023-40725HistorySep 12, 2023 - 10:15 a.m.
Design/Logic Flaw
2023-09-1210:15:00
PRIOn knowledge base
www.prio-n.com
4
vulnerability
usernames enumeration
login session
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qms_automotive | lt | 12.39 |
Related
cvelist
cvelist
CVE-2023-40725
2023-09-12 09:32:25
nvd
nvd
CVE-2023-40725
2023-09-12 10:15:28
cve
cve
CVE-2023-40725
2023-09-12 10:15:28
cnvd
cnvd
ics
ics
Siemens QMS Automotive
2023-09-14 12:00:00