CVE-2021-34575
7.5HIGHIn MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Veröffentlicht: 8/2/2021Aktualisiert: 11/21/2024
Beschreibung
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
KI-AnalyseKI-gestützt
Betroffene Produkte
mbconnectlinembconnect24
mbconnectlinemymbconnect24
Referenzen
- https://cert.vde.com/de-de/advisories/vde-2021-030Third Party Advisory
- https://cert.vde.com/de-de/advisories/vde-2021-030Third Party Advisory