Beveiligingsadvies

CVE-2021-44554

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-20 08:31:42

Laatst bijgewerkt 2024-08-04 04:25:16

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI. By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to the configuration of VirtualUI. Common users are administrator, admin, guest and krgtbt.

← Alle CVE's bekijken Bekijk op cve.org ↗