CVE-2021-40126

Cisco Umbrella exposes an email-enumeration vulnerability in its web-based dashboard. An authenticated, remote attacker could attempt to modify a user’s email address and trigger an overly descriptive error message when the new address already exists, allowing enumeration of existing email addres...