Beveiligingsadvies

CVE-2022-40084

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-10-20 00:00:00
Laatst bijgewerkt 2025-05-08 15:49:42
Toegewezen door mitre
CVSS-score 5.3
Status PUBLISHED

Beschrijving

OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.