Description (CNA)
Windu CMS is vulnerable to User Enumeration. This issue occurs during logon, where a difference in messages could allow an attacker to determine if the login is valid or not, enabling a brute force attack with valid logins. Only version 4.1 was tested and confirmed as vulnerable. This issue was fixed in version 4.1 build 2250.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| JCD / Windu CMS | affected 0 through 4.1 |
CWE
CWE-204
References
ADP enrichment
No English description supplied.
No references supplied.