Ipswitch MOVEit DMZ Username Enumeration Vulnerability

Ipswitch MOVEit is an automated file transfer system from Ipswitch, Inc. in the U.S. DMZ is one of the versions. Ipswitch MOVEit DMZ according to the account exists or not to return different error messages, remote attackers can send a series of SOAP to the machine.aspx file please enumerate the...

CVE-2015-7680: Exposure of Sensitive Information to an Unauthorized Actor

Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx...