222 matches found
Information Disclosure
sulu/sulu is vulnerable to Observable Response Discrepancy. The vulnerability exists due to the insecure access control used in the security.yaml configuration, which allows an attacker to detect whether a user's username or email exists and which ones do not exist through the Admin Login form...
GHSA-WMWF-49VV-P3MR Sulu Observable Response Discrepancy on Admin Login
Impact It allows over the Admin Login form to detect which user username, email exists and which one do not exist. Impacted by this issue are Sulu installation = 2.5.0 and getMessage; instead the $exception-getMessageKey; References Currently no references...
Design/Logic Flaw
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37217 Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37217 Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy
Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy...
CVE-2023-37217
CVE-2023-37217 affects Tadiran Telecom Aeonix. The vulnerability is described as an observable response discrepancy (CWE-204) that can reveal differences in responses; a false comparison vulnerability is noted in external summaries (CNNVD/PT-2023-25835) as the underlying issue. CVSS data indicate...
PT-2023-25835 · Tadiran Telecom · Tadiran Telecom Aeonix
Name of the Vulnerable Software and Affected Versions: Tadiran Telecom Aeonix affected versions not specified Description: The issue is related to an observable response discrepancy, which is a type of security flaw. This discrepancy can potentially be exploited. Recommendations: At the moment,...
Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers
Overview Command Center RX CCRX, a web interface for MFPs and printers provided by KYOCERA Document Solutions Inc., contains multiple vulnerabilities listed below. Path traversal CWE-22 - CVE-2023-34259 Path traversal CWE-22 - CVE-2023-34260 Observable response discrepancy CWE-204 - CVE-2023-3426...
CVE-2023-35698
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt...
CVE-2023-35698
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt...
CVE-2023-35698
CVE-2023-35698 concerns the SICK ICR890-4 track-and-trace system. A network-facing issue causes an observable response discrepancy during an FTP login failure, which could allow a remote attacker to identify valid FTP usernames. The precise vulnerable component is not fully detailed in the provid...
CVE-2023-35698
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt...
SICK ICR890-4 安全漏洞
The SICK ICR890-4 is a track and trace system from SICK, Germany. A security vulnerability exists in the SICK ICR890-4 that stems from an observable response discrepancy when attempting to log into an FTP server...
CVE-2023-31186
Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...
CVE-2023-31186
Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...
Code injection
Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...
CVE-2023-31186 Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy
Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...
CVE-2023-31186 Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy
Avaya IX Workforce Engagement v15.2.7.1195 - User Enumeration - Observable Response Discrepancy...
CVE-2023-31186
CVE-2023-31186 affects Avaya IX Workforce Engagement, specifically version 15.2.7.1195, where a user enumeration vulnerability is described as an observable response discrepancy. The connected documents (e.g., CNNVD-202305-2542 and NVD entry) corroborate that an attacker could enumerate users via...
