high7.5
CVE-2021-34580
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted…
Impact
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbconnect24 | through 2.9.0 |
| Mbconnectline | Mymbconnect24 | through 2.9.0 |