描述
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
AI分析AI驱动
受影响产品
mbconnectlinembconnect24
mbconnectlinemymbconnect24
参考资料
- https://cert.vde.com/de-de/advisories/vde-2021-030Third Party Advisory
- https://cert.vde.com/de-de/advisories/vde-2021-030Third Party Advisory