User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
References
Link | Resource |
---|---|
http://foss-online.com | Broken Link |
http://ordat.com | Product |
https://mind-bytes.de/offenlegung-existierender-benutzerkonten-in-foss-online-cve-2024-34336/ | Exploit Technical Description |
Configurations
History
18 Sep 2024, 20:32
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:ordat:ordat.erp:*:*:*:*:*:*:*:* | |
Summary |
|
|
First Time |
Ordat
Ordat ordat.erp |
|
CWE | CWE-203 | |
References | () http://foss-online.com - Broken Link | |
References | () http://ordat.com - Product | |
References | () https://mind-bytes.de/offenlegung-existierender-benutzerkonten-in-foss-online-cve-2024-34336/ - Exploit, Technical Description |
12 Sep 2024, 20:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
CWE | CWE-204 |
12 Sep 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-12 19:15
Updated : 2024-09-18 20:32
NVD link : CVE-2024-34336
Mitre link : CVE-2024-34336
CVE.ORG link : CVE-2024-34336
JSON object : View
Products Affected
ordat
- ordat.erp