CVE-2022-1989 — CODESYS Visualization vulnerable to user enumeration

CVE-2022-1989

CODESYS Visualization vulnerable to user enumeration PUBLISHED

Description (CNA)

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Visualization	affected V3 before V4.2.0.0

CWE

CWE-204

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=

ADP enrichment

CVE

No English description supplied.

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=