CVE-2023-47159

MEDIUM Year: 2023
CVSS v3 Score
4.3
Medium
Weakness Type
CWE-204
View all →

Vulnerability Description

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.

Related Vulnerabilities

CVE-2023-23584

MEDIUM
CVSS:4.3(Medium)

An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable. This issue affe...

CWE-2042023

CVE-2023-39343

MEDIUM
CVSS:4.3(Medium)

Sulu is an open-source PHP content management system based on the Symfony framework. It allows over the Admin Login form to detect which user (username, email) exists and which one do not exist. Sulu ...

CWE-2042023

CVE-2024-41715

MEDIUM
CVSS:4.3(Medium)

The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the enc...

CWE-2042024

CVE-2024-47129

MEDIUM
CVSS:4.3(Medium)

The goTenna Pro App does not inject extra characters into broadcasted frames to obfuscate the length of messages. This makes it possible to tell the length of the payload regardless of the encryption ...

CWE-2042024

CVE-2020-11063

LOW
CVSS:3.7(Low)

In TYPO3 CMS versions 10.4.0 and 10.4.1, it has been discovered that time-based attacks can be used with the password reset functionality for backend users. This allows an attacker to mount user enume...

CWE-2042020

CVE-2024-2482

LOW
CVSS:3.7(Low)

A vulnerability has been found in Surya2Developer Hostel Management Service 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /check_availabilit...

CWE-2042024