CVE-2021-37935

An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searchin...

PT-2021-21927

Name of the Vulnerable Software and Affected Versions: Huntflow Enterprise versions prior to 3.10.4 Description: An information disclosure issue in the login page could allow an unauthenticated, remote user to obtain information about the domain name of the configured LDAP server. This can be...

CVE-2021-37935: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searchin...