CVE-2023-40725 in QMS Automotiveinformación

Resumen

por MITRE • 2023-09-12

A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Siemens AG

Reservar

2023-08-21

Divulgación

2023-09-12

Moderación

aceptado

Artículo

VDB-239517

CPE

listo

EPSS

0.00175

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-40725
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-40725
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-40725/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you need the next level of professionalism?

Upgrade your account now!