CVE-2024-54454

creationtimestamp| type| source ---|---|--- 2024-12-27 19:50:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113726524302791918 2024-12-27 20:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskorfgy25 2024-12-27 21:52:52+00:00| seen|...

CVE-2024-54454

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or...

CVE-2024-54454

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or...

CVE-2024-54454

The Kurmi Provisioning Suite is impacted by an Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page. This flaw allows remote attackers to perform username enumeration by testing whether a provided username is valid. Affected versions include t...