PT-2025-48683

Name of the Vulnerable Software and Affected Versions TCMAN GIM version 20250304 Description An unauthenticated attacker can determine if a user exists on the system. This is possible through the pda:username parameter with soapaction GetLastDatePasswordChange in the '/WS/PDAWebService.asmx' API...