Beveiligingsadvies

CVE-2023-40725

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-12 09:32:25
Laatst bijgewerkt 2025-02-27 20:56:05
Toegewezen door siemens
CVSS-score 4.0
Status PUBLISHED

Beschrijving

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.