361 matches found
CVE-2024-52043
HumHub CVE-2024-52043 affects HumHub up to version 1.16.2. The issue stems from error messages that expose sensitive information, enabling user enumeration. Impact is described as potential exposure of user data via observable responses on Linux deployments. Connected documents consistently refer...
PT-2024-35101 · Humhub · Humhub
Name of the Vulnerable Software and Affected Versions: HumHub versions through 1.16.2 Description: The issue affects HumHub, allowing excavation through user enumeration due to an observable response discrepancy. This discrepancy can lead to the generation of error messages containing sensitive...
Security Bulletin: IBM Sterling Control Center is vulnerable to User Enumeration
Summary User Enumeration is affecting v6.2.1 and v6.3.1. Vulnerability Details CVEID:CVE-2024-35114 DESCRIPTION: IBM Sterling Control Center could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts. CWE:CWE-204: Observable Response Discrepancy...
CVE-2024-47129 Observable Response Discrepancy in goTenna Pro
The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used...
CVE-2024-41715: Observable Response Discrepancy
The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used...
CVE-2024-47129: Observable Response Discrepancy
The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption used...
Observable Response Discrepancy
Overview Affected versions of this package are vulnerable to Observable Response Discrepancy through the login notification mechanism. An attacker can determine valid usernames by observing the different responses given for correct usernames with weak passwords versus incorrect usernames with wea...
CVE-2023-49069
A vulnerability has been identified in Mendix Runtime V10 All versions V10.17.0 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.12 All versions V10.12.11 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.6 All...
CVE-2023-49069
The CVE relates to Mendix Runtime authentication: an observable response discrepancy when validating usernames in basic authentication allows unauthenticated remote attackers to distinguish valid vs invalid usernames. Affected versions include Mendix Runtime V8 (all versions < V8.18.33), V9 (&...
Siemens Mendix Runtime
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2023-49069: Observable Response Discrepancy
A vulnerability has been identified in Mendix Runtime V10 All versions V10.17.0 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.12 All versions V10.12.11 only if the basic authentication mechanism is used by the application, Mendix Runtime V10.6 All...
CVE-2024-42343
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343 Loway - CWE-204: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
CVE-2024-42343
CVE-2024-42343 concerns a vulnerability in Loway QueueMetrics where an observable response discrepancy exists. Connected sources identify the affected product as Loway QueueMetrics, with versions cited as 17.06.1 through 22.02.11 (CNNVD) and reference to an observable response discrepancy that ca...
CVE-2024-42343: Observable Response Discrepancy
Loway - CWE-204: Observable Response Discrepancy...
GO-2023-1654 Answer has Observable Response Discrepancy in github.com/answerdev/answer
Answer has Observable Response Discrepancy in github.com/answerdev/answer...
CVE-2024-38431
Matrix Tafnit v8 - CWE-204: Observable Response Discrepancy...
CVE-2024-38431
CVE-2024-38431 relates to Matrix Tafnit v8 and CWE-204: Observable Response Discrepancy. The available documents identify Matrix Tafnit version 8 as affected, with the underlying issue described as an observable response discrepancy. Exploitation status is not documented in the provided sources. ...
