A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
References
Link | Resource |
---|---|
https://senscybersecurity.nl/cve-2024-44762-explained/ |
Configurations
No configuration.
History
17 Oct 2024, 17:35
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
CWE | CWE-209 |
16 Oct 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-16 21:15
Updated : 2024-10-18 12:53
NVD link : CVE-2024-44762
Mitre link : CVE-2024-44762
CVE.ORG link : CVE-2024-44762
JSON object : View
Products Affected
No product.
CWE
CWE-209
Generation of Error Message Containing Sensitive Information