7 matches found
CVE-2021-20556
IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote user to enumerate usernames due to differentiating error messages on existing usernames. IBM X-Force ID: 199181...
PT-2024-12126 · Ibm · Ibm Aspera Orchestrator
Name of the Vulnerable Software and Affected Versions: IBM Aspera Orchestrator version 4.0.1 Description: The issue allows a remote attacker to enumerate usernames due to observable response discrepancies. Recommendations: For IBM Aspera Orchestrator version 4.0.1, upgrade the affected component ...
SUSE CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames...
CVE-2021-29687
IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018...
PT-2019-19047 · Atlassian · Jira
Name of the Vulnerable Software and Affected Versions: Jira versions prior to 8.4.0 Description: The issue concerns an information disclosure vulnerability in the /rest/api/latest/groupuserpicker resource. This allows remote attackers to enumerate usernames. Recommendations: For versions prior to...
PT-2017-19014 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.1.3-15152 Description: The issue allows remote attackers to enumerate valid usernames via unspecified vectors due to an information exposure vulnerability in forget passwd.cgi...
RedHat Linux 7.0 Apache - Remote Username Enumeration
RedHat Linux 7.0 Apache - Remote Username Enumeration source: https://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whethe...