EUVD-2025-200246

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...

PT-2025-48683

Name of the Vulnerable Software and Affected Versions TCMAN GIM version 20250304 Description An unauthenticated attacker can determine if a user exists on the system. This is possible through the pda:username parameter with soapaction GetLastDatePasswordChange in the '/WS/PDAWebService.asmx' API...

CVE-2025-40622

SQL injection in TCMAN's GIM v11. This vulnerability allows an unauthenticated attacker to inject an SQL statement to obtain, update and delete all information in the database. This vulnerability was found in each of the following parameters according to the vulnerability identifier ‘username’...

Get User without Password and User which have an PW and days since last Pasword change

This plugin uses ssh to get User without Password and User which have an PW and days since last Pasword change. If the testuser have no access to /etc/shadow an KB entry will set. OpenVAS Vulnerability Test $Id: GSHBSSHpasswords.nasl 7279 2017-09-26 13:40:36Z cfischer $ Get User without Password...