CVE-2021-44848 | BDVDB-2026-165683 Detail

Description#

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/cybelesoft/virtualui/issues/1
http://packetstormsecurity.com/files/165327/Cibele-Thinfinity-VirtualUI-2.5.41.0-User-Enumeration.html

Exploit#

No public exploit known

History#

Version 12021-12-13Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.