Description (CNA)
User enumeration in Nagvis' Checkmk MultisiteAuth before version 1.9.48 allows an unauthenticated attacker to enumerate Checkmk usernames.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Nagvis / Nagvis | affected 1.9.0 before 1.9.48 |
CWE
CWE-203
References
- https://github.com/NagVis/nagvis/pull/411/commits/4acabcf9d5b2d26f390e760f59def8e163908d66
- https://www.nagvis.org/downloads/changelog/1.9.48
ADP enrichment
No English description supplied.
No references supplied.