4 matches found
CVE-2023-44038
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...
6.5CVSS7AI score0.00312EPSS
SaveExploits0
CVE-2023-44038
In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via an LDAP injection attack...
6.5CVSS5.8AI score0.00312EPSS
SaveExploits0References2
CVE-2023-44038
VeridiumID versions prior to 3.5.0 are vulnerable to an LDAP injection attack on the identity provider page . This flaw allows an unauthenticated attacker to discover information about registered users. To resolve this issue, it is recommended to update to version 3.5.0 or later . Specific exploi...
6.5CVSS6.9AI score0.00312EPSS
SaveExploits0References2Affected Software1
20