Security Advisory

CVE-2021-44155

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-13 00:00:00

Last updated 2024-08-04 04:17:24

Assigner mitre

State PUBLISHED

Description

An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.

← Browse all CVEs View on cve.org ↗