Vulnerabilities > CVE-2021-47664

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

NVD

Published: 2025-04-24

Updated: 2025-04-24

Summary

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames.

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

References

https://www.sciencedirect.com/science/article/pii/S2351978921001657

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.