Beveiligingsadvies

CVE-2020-35952

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-01-03 03:49:31

Laatst bijgewerkt 2024-08-04 17:16:13

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single "Incorrect username or password" message in both cases), which might allow enumeration.

← Alle CVE's bekijken Bekijk op cve.org ↗