medium6.3
CVE-2024-11084
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.
Impact
Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists.
Affected products
| Product | Affected versions |
|---|---|
| Helix ALM | before 2025.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.