← CVE Intelligence

CVE-2025-6056

Ergon Informatik AG / Airlock IAM PUBLISHED

Description (CNA)

Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.

Affected (CNA)

Vendor / productVersions
Ergon Informatik AG / Airlock IAMaffected 7.7.9 through 7.7.10; affected 8.0.8; affected 8.1.7; affected 8.2.4; affected 8.3.1; unaffected 8.4.1

CWE

CWE-203

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.