CVE-2025-67806

CVSS 3.7 LOWEPSS 0.3%CWE-204

The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000. On-premise administrators can toggle this behavior in newer versions.

CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://pastebin.com/Tk4LgMG2 https://www.sagedpw.at/