CVE Daily

CVE-2013-6043

The login function in Softaculous Webuzo before 2.1.4 provides different error m...

Medium CVSS 5.0

Overview

The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests.

CWE: CWE-200 Published: 2014-12-27T18:59:03.650
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags