medium4.0
CVE-2023-40725
A vulnerability has been identified in QMS Automotive (All versions < V12.39).
Impact
A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Qms Automotive | before 12.39 |