CVE-2020-26062

Cisco Integrated Management Controller (CIMC) suffers a username-enumeration vulnerability due to differences in authentication responses. An unauthenticated, remote attacker can determine valid usernames by sending authentication requests to CIMC over the network. Multiple connected sources (CVE...

Cisco Integrated Management Controller Username Enumeration (cisco-sa-cimc-enum-CyheP3B7)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability due to differences in authentication responses sent back from the application as part of an authentication attempt. An unauthenticated, remote attacker can exploit this, by by sending...