3402 matches found
Design/Logic Flaw
An issue was discovered in /goform/loginprocess in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users...
CVE-2021-44155
An issue was discovered in /goform/loginprocess in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users...
CVE-2021-44155
The CVE describes a user-enumeration flaw in Reprise License Manager (RLM) 14.2 affecting the /goform/login_process API. When attempting to log in, the response reveals a valid username by returning a “Login Failed” message, whereas an invalid username does not include that string, enabling an at...
GHSA-VJ54-CJRX-X696 Observable Discrepancy in Argo
Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid non-SSO accounts because /api/v1/session returned 401 for an existing username and 404 otherwise. Specific Go Packages Affected...
Observable Discrepancy in Argo
Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid non-SSO accounts because /api/v1/session returned 401 for an existing username and 404 otherwise. Specific Go Packages Affected...
Observable Discrepancy
Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames of valid non-SSO accounts because /api/v1/session returned 401 for an existing username and 404 otherwise...
Reprise License Manager 14.2 User Enumeration
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44155 Vulnerability Title: Unauthenticated User Enumeration Severity: Low Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Date: 2021-11-25...
Reprise License Manager 14.2 User Enumeration Vulnerability
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44155 Vulnerability Title: Unauthenticated User Enumeration Severity: Low Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Introduction: An issue...
OrbiTeam BSCW Server XSS / LFI / User Enumeration Vulnerabilities
OrbiTeam BSCW Server versions 5.0.x, 5.1.x, 5.2.4 and below, 7.3.x and below, and 7.4.3 and below suffer from path traversal, cross site scripting, HTTP header, session object manipulation, local file inclusion, and user enumeration vulnerabilities...
goEnumBruteSpray - User Enumeration And Password Bruteforce On Azure, ADFS, OWA, O365 And Gather Emails On Linkedin
The recommended module is o365 for user enumeration and passwords bruteforce / spray . Additional information can be retrieved to avoid account lockout, to know that the password is good but expired, MFA enabled,... Linkedin This module should be used to retrieve a list of email addresses before...
JetBrains TeamCity User Enumeration Vulnerability
TeamCity is a Java-based build management and continuous integration server from JetBrains. A user enumeration vulnerability exists in versions of JetBrains TeamCity prior to 2021.1.2. No detailed vulnerability details are provided at this time...
CVE-2021-43194
In JetBrains TeamCity before 2021.1.2, user enumeration was possible...
CVE-2021-43194
In JetBrains TeamCity before 2021.1.2, user enumeration was possible...
CVE-2021-43194
In JetBrains TeamCity before 2021.1.2, user enumeration was possible...
Code injection
In JetBrains TeamCity before 2021.1.2, user enumeration was possible...
CVE-2021-43194
In JetBrains TeamCity before 2021.1.2, user enumeration was possible...
CVE-2021-43194
The CVE-2021-43194 entry concerns JetBrains TeamCity where a user enumeration issue existed in versions before 2021.1.2. Public sources confirm an information disclosure vulnerability (user enumeration) that could reveal user existence or related data, with CVSS vectors indicating network access ...
JetBrains Security Bulletin Q3 2021
JetBrains Security JetBrains Security Bulletin Q3 2021 Robert Demmer In the third quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity ...
Jetbrains JetBrains TeamCity 信息泄露漏洞
TeamCity is a Java-based build management and continuous integration server from JetBrains. A user enumeration vulnerability exists in versions of JetBrains TeamCity prior to 2021.1.2. No detailed vulnerability details are provided at this time...
Pentaho Business Analytics / Pentaho Business Server 9.1 User Enumeration
Product: Pentaho Business Analytics / Pentaho Business Server Vendor / Manufacturer: Hitachi Vantara Affected Versions: = 9.1 Vulnerability Type: Jackrabbit User Enumeration Solution Status: Fix Released on public GitHub repository Manufacturer Notification: 8th February 2021 Solution Date: Wont...