Vulnerabilities > CVE-2021-34575 - Information Exposure Through Discrepancy vulnerability in Mbconnectline Mbconnect24 and Mymbconnect24

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
mbconnectline
CWE-203
NVD
Published: 2021-08-02
Updated: 2021-08-10

Summary

In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.

Vulnerable Configurations

Part Description Count
Application
Mbconnectline
10

Common Weakness Enumeration (CWE)

References