← back
CVE-2024-44762

CVE-2024-44762

CVSS 5.3 MEDIUMEPSS 2.5%CWE-209
A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows attackers to enumerate valid user accounts.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/arbaaz29/CVE-2024-44762-webmin-userenum★ 0exploitdbwww.exploit-db.com/exploits/52254unverifiedexploitdbwww.exploit-db.com/exploits/52114unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://senscybersecurity.nl/cve-2024-44762-explained/