Vulnerabilities > CVE-2021-34575 - Information Exposure Through Discrepancy vulnerability in Mbconnectline Mbconnect24 and Mymbconnect24
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |