Vulnerabilities > CVE-2019-13599 - Information Exposure Through Discrepancy vulnerability in Control-Webpanel Webpanel 0.9.8.848
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.848, the Login process allows attackers to check whether a username is valid by comparing response times.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Packetstorm
| data source | https://packetstormsecurity.com/files/download/154164/cwp098848-enumerate.txt |
| id | PACKETSTORM:154164 |
| last seen | 2019-09-07 |
| published | 2019-08-20 |
| reporter | Pongtorn Angsuchotmetee |
| source | https://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html |
| title | CentOS-WebPanel.com Control Web Panel (CWP) 0.9.8.848 User Enumeration |
References
- http://packetstormsecurity.com/files/154164/CentOS-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html
- http://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-CentOS-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html
- http://packetstormsecurity.com/files/154164/CentOS-WebPanel.com-Control-Web-Panel-CWP-0.9.8.848-User-Enumeration.html