CVE-2023-47102

Summary

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://quantiano.github.io/cve-2023-47102/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://quantiano.github.io/cve-2023-47102/
• https://nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-47102

• ←Previous
• Next→