2019-09-05 17:29:00
mitre
PUBLISHED
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.