low3.3
CVE-2017-14772
Skybox Manager Client Application is prone to information disclosure via a username enumeration attack.
Impact
Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Skyboxsecurity | Skybox Manager Client Application | All versions |