Beveiligingsadvies

CVE-2022-50800

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-30 22:41:40

Laatst bijgewerkt 2026-01-02 19:51:05

Toegewezen door VulnCheck

CVSS-score 7.5

Status PUBLISHED

Beschrijving

H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.

← Alle CVE's bekijken Bekijk op cve.org ↗