medium6.9
CVE-2025-34155
Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality.
Impact
Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can facilitate user enumeration and increase the likelihood of targeted brute-force or credential-stuffing attacks.
Affected products
| Product | Affected versions |
|---|---|
| Tibbo AggreGate Network Manager | before 6.40.05 |
Versions were read from the advisory text. No structured product data has been published for this record yet.