Lucene search

K
prionPRIOn knowledge basePRION:CVE-2013-6043
HistoryDec 27, 2014 - 6:59 p.m.

Authentication flaw

2014-12-2718:59:00
PRIOn knowledge base
www.prio-n.com
2

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.

CPENameOperatorVersion
webuzole2.1.3
webuzoeq2.1.1
webuzoeq2.1.0
webuzoeq2.1.2

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.7%

Related for PRION:CVE-2013-6043