Vulnerabilities > CVE-2019-16669 - Information Exposure Through Discrepancy vulnerability in Pagekit 1.0.17
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
The Reset Password feature in Pagekit 1.0.17 gives a different response depending on whether the e-mail address of a valid user account is entered, which might make it easier for attackers to enumerate accounts.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |