PT-2021-20561

Name of the Vulnerable Software and Affected Versions: mymbCONNECT24, mbCONNECT24 versions prior to 2.9.0 Description: The issue allows an unauthenticated user to enumerate valid backend users by analyzing the server's response to crafted invalid login attempts. Recommendations: For versions prio...

PT-2021-2273

Name of the Vulnerable Software and Affected Versions: mymbCONNECT24 and mbCONNECT24 versions through V2.6.2 Description: The issue is related to improper use of access validation, allowing a logged-in user to kill web2go sessions in an account they should not have access to. This is due to...