Beveiligingsadvies

CVE-2020-26526

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-02 19:55:29

Laatst bijgewerkt 2024-08-04 15:56:04

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was discovered in Damstra Smart Asset 2020.7. It is possible to enumerate valid usernames on the login page. The application sends a different server response when the username is invalid than when the username is valid ("Unable to find an APIDomain" versus "Wrong email or password").

← Alle CVE's bekijken Bekijk op cve.org ↗