high7.5
CVE-2021-34575
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the serv…
Impact
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.8.0 |
| Mbconnectline | Mymbconnect24 | through 2.8.0 |