CVE-2021-44848

Medium

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on…

mitre·CWE-203·Published 2021-12-13

CVSS

5.3

EPSS

0.23

KEV

Exploits

cve.orgen

164 chars

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.

NVDen

164 chars

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.

En Cibele Thinfinity VirtualUI versiones anteriores a 3.0, /changePassword devuelve diferentes respuestas para peticiones de autenticación no válidas dependiendo de si el nombre de usuario se presenta

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N