medium4.3
CVE-2014-1931
The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on whi…
Impact
The user login page in Visibility Software Cyber Recruiter before 8.1.00 generates different responses for invalid password-retrieval attempts depending on which data elements are incorrect, which might allow remote attackers to obtain account-related information via a series of requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Visibility Software | Cyber Recruiter | through 8.0 Versions 6.2, 6.4, 6.6, 6.8, 7.0 |