CVE-2025-34155 | BDVDB-2026-299231 Detail

Description#

Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can facilitate user enumeration and increase the likelihood of targeted brute-force or credential-stuffing attacks.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-10-23Record published in the CVE List.
2. Version 22026-05-14Most recent update recorded in the CVE List.