MEDIUM🇵🇱 Wersja polska

CVE-2023-3897

CVSS 4.8v3.1pub. 2023-07-25upd. 2025-02-13

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

  • 42gears Suremdm

    APP
    42Gears
    ≤ 6.31
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-15656HIGH7.5ten sam produkt

An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can...

CVE-2018-15657HIGH7.3ten sam produkt

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" ...

CVE-2018-15658HIGH7.5ten sam produkt

An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePa...

CVE-2018-15655MEDIUM6.5ten sam produkt

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings. Cross-origin access is...

CVE-2018-15659MEDIUM6.5ten sam produkt

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight app...