CVE-2018-15656: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/register/:email, where :email is a base64 encoded e-mail address, to receive confirmation as to whether a user account exists in the system with the specifie...

PT-2019-9152

Name of the Vulnerable Software and Affected Versions 42Gears SureMDM versions prior to 2018-11-27 Description An issue was discovered in the registration API endpoint. An attacker can submit a GET request to "/api/register/:email", where :email is a base64 encoded e-mail address, to receive...