medium5.3
CVE-2019-14278
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.
Impact
In Knowage through 6.1.1, an unauthenticated user can enumerated valid usernames via the ChangePwdServlet page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knowage-Suite | Knowage | through 6.1.1 |