PT-2021-20232

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Password Manager Pro versions prior to 11.2 11200 Description: The issue allows for username enumeration due to the response to a failed login request being null only when the username is invalid. This can be exploited throu...

CVE-2021-33617: Undefined Security Weakness

Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response to a failed login request is null only when the username is invalid...