CVE-2024-54454

creationtimestamp| type| source ---|---|--- 2024-12-27 19:50:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113726524302791918 2024-12-27 20:15:56+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lecskorfgy25 2024-12-27 21:52:52+00:00| seen|...

CVE-2024-54454

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or...

CVE-2024-54454

An issue was discovered in Kurmi Provisioning Suite before 7.9.0.35, 7.10.x through 7.10.0.18, and 7.11.x through 7.11.0.15. An Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page allows remote attackers to test whether a username is valid or...

CVE-2024-54454

The Kurmi Provisioning Suite is vulnerable to an Observable Response Discrepancy vulnerability in the sendPasswordReinitLink action of the unlogged.do page. This flaw allows remote attackers to verify the validity of usernames. Affected versions include those prior to 7.9.0.35 , 7.10.x through 7....