Beveiligingsadvies
CVE-2021-34580
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.