Description (CNA)
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://cwe.mitre.org/data/definitions/204.html
- https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw
- https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332
- https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-30332
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.