Advisories · Weakness

CWE-204.

Every Advisory and CVE whose sources give the weakness CWE-204, newest first.

CVE-2024-6056 CVE record

CVSS 6.3 Medium

nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy
- nasirkhan Laravel Starter
- CWE-204
Not analysed yet 17 Jun 2024
CVE-2024-31870 CVE record

CVSS 3.3 Low

IBM i information disclosure
- i
- CWE-204
Not analysed yet 15 Jun 2024
CVE-2024-33856 CVE record

CVSS 5.3 Medium

An issue was discovered in Logpoint before 7.4.0.
- CWE-204
Not analysed yet 7 May 2024
CVE-2023-27283 CVE record

CVSS 5.3 Medium

IBM Aspera Orchestrator information disclosure
- IBM Aspera Orchestrator
- CWE-204
Not analysed yet 4 May 2024
CVE-2021-20556 CVE record

CVSS 5.3 Medium

IBM Cognos Controller information disclosure
- IBM Cognos Controller
- CWE-204
Not analysed yet 3 May 2024
github.com/IceWhaleTech/CasaOS-UserService Go

CVSS 6.2 Medium

CasaOS Username Enumeration - Bypass of CVE-2024-24766
- CWE-204
>=0.4.7, <0.4.8 · fixed in 0.4.8

GHSA-hcw2-2r9c-gc6p · CVE-2024-28232 Not analysed yet 1 Apr 2024
UmbracoCMS NuGet

CVSS 3.7 Low

Umbraco possible user enumeration
- Information disclosure
- CWE-204
>=10.0.0, <10.8.5 · fixed in 10.8.5

GHSA-552f-97wf-pmpq · CVE-2024-28868 Not analysed yet 20 Mar 2024
CVE-2024-1145 CVE record

CVSS 5.3 Medium

Observable Response Discrepancy at Alma Devklan Blog
- Devklan Alma Blog
- CWE-204
Not analysed yet 19 Mar 2024
CVE-2024-2482 CVE record

CVSS 3.7 Low

Surya2Developer Hostel Management Service HTTP POST Request check_availability.php observable response discrepancy
- Surya2Developer Hostel Management Service
- CWE-204
Not analysed yet 15 Mar 2024
CVE-2023-46170 CVE record

CVSS 6.5 Medium

IBM DS8900F information disclosure
- IBM DS8900F
- CWE-204
Not analysed yet 7 Mar 2024
github.com/IceWhaleTech/CasaOS-UserService Go

CVSS 6.2 Medium

CasaOS Username Enumeration
- CWE-204
· fixed in 0.4.7

GHSA-c967-2652-gfjm · CVE-2024-24766 Not analysed yet 6 Mar 2024
CVE-2023-38362 CVE record

CVSS 5.3 Medium

IBM CICS TX information disclosure
- IBM CICS TX Advanced
- CWE-204
Not analysed yet 4 Mar 2024
CVE-2023-50306 CVE record

CVSS 4.0 Medium

IBM Common Licensing information disclosure
- IBM Common Licensing
- CWE-204
Not analysed yet 20 Feb 2024
com.liferay.portal:release.dxp.bom +1 Maven

CVSS 5.3 Medium

Liferay Portal allows attackers to discover the existence of sites
- Information disclosure
- CWE-204
>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp18 · fixed in 7.3.10.u4, 7.2.10.fp18

GHSA-mqf8-4cqm-p83x · CVE-2024-25146 Not analysed yet 8 Feb 2024
CVE-2023-23584 CVE record

CVSS 4.3 Medium

An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable.
- Gallagher Command Centre Server
- CWE-204
Not analysed yet 18 Dec 2023
CVE-2023-37831 CVE record

An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credentials are submitted.
- CWE-204
Not analysed yet 31 Oct 2023
CVE-2023-4095 CVE record

CVSS 5.3 Medium

User enumeration vulnerability in Fujitsu Arconte Áurea
- Fujitsu Arconte Áurea
- CWE-204
Not analysed yet 19 Sept 2023
piccolo PyPI

CVSS 5.3 Medium

Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
- Information disclosure
- CWE-204
<0.121.0 · fixed in 0.121.0

GHSA-h7cm-mrvq-wcfr · CVE-2023-41885 Not analysed yet 12 Sept 2023
CVE-2023-3221 CVE record

CVSS 5.3 Medium

User enumeration vulnerability in Roundcube Password Recovery Plugin
- AlfnRU Password Recovery Plugin
- CWE-204
Not analysed yet 4 Sept 2023
CVE-2023-40179 CVE record

CVSS 5.3 Medium

Silverware Games vulnerable to account enumeration via inconsistent responses
- mesosoi silverwaregames-io-issue-tracker
- CWE-204
Not analysed yet 25 Aug 2023
sulu/sulu Packagist

CVSS 4.3 Medium

Sulu Observable Response Discrepancy on Admin Login
- CWE-204
>=2.5.0, <2.5.10 · fixed in 2.5.10

GHSA-wmwf-49vv-p3mr · CVE-2023-39343 Not analysed yet 3 Aug 2023
CVE-2023-37217 CVE record

CVSS 5.3 Medium

Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy
- Tadiran Telecom Aeonix
- CWE-204
Not analysed yet 30 Jul 2023
CVE-2023-35698 CVE record

CVSS 5.3 Medium

SICK AG ICR890-4: Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to…
- SICK AG ICR890-4
- CWE-204
Not analysed yet 10 Jul 2023
CVE-2023-3336 CVE record

CVSS 5.3 Medium

TN-5900 Series User Enumeration Vulnerability
- Moxa TN-5900 Series
- CWE-204
Not analysed yet 5 Jul 2023
CVE-2023-31186 CVE record

CVSS 5.3 Medium

Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy
- Avaya IX Workforce Engagement
- CWE-204
Not analysed yet 30 May 2023
CVE-2023-28412 CVE record

CVSS 5.3 Medium

Snap One OvrC Cloud: When supplied with a random MAC address…
- Snap One OvrC Cloud
- CWE-204
Not analysed yet 22 May 2023
CVE-2023-32346 CVE record

CVSS 5.3 Medium

Teltonika Remote Management System: Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that…
- Teltonika Remote Management System
- CWE-204
Not analysed yet 22 May 2023
CVE-2023-23449 CVE record

CVSS 5.3 Medium

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid us…
- SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD20AXX AIR FLOW SENSOR
- CWE-204
Not analysed yet 15 May 2023
CVE-2023-27464 CVE record

CVSS 5.3 Medium

Siemens Mendix Forgot Password (Mendix 7 compatible): A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All…
- Siemens Mendix Forgot Password (Mendix 7 compatible)
- Siemens Mendix Forgot Password (Mendix 8 compatible)
- CWE-204
Not analysed yet 11 Apr 2023
vantage6 PyPI

CVSS 5.3 Medium

vantage6 vulnerable to Observable Response Discrepancy
- Information disclosure
- CWE-204
<3.8.0 · fixed in 3.8.0

GHSA-36gx-9q6h-g429 · CVE-2022-39228 Not analysed yet 28 Feb 2023
CVE-2022-41697 CVE record

CVSS 5.3 Medium

A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.
- Ghost
- CWE-204
Not analysed yet 23 Dec 2022
getkirby/cms Packagist

CVSS 6.5 Medium

Kirby CMS vulnerable to user enumeration in the brute force protection
- Information disclosure
- CWE-204
<3.5.8.2 || >=3.6.0, <3.6.6.2 || >=3.7.0, <3.7.5.1 || >=3.8.0, <3.8.1 · fixed in 3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1

GHSA-c27j-76xg-6x4f · CVE-2022-39315 Not analysed yet 18 Oct 2022
getkirby/cms Packagist

CVSS 4.8 Medium

Kirby CMS vulnerable to user enumeration in the code-based login and password reset forms
- Authentication bypass
- CWE-204
>=3.5.0, <3.5.8.2 || >=3.6.0, <3.6.6.2 || >=3.7.0, <3.7.5.1 || >=3.8.0, <3.8.1 · fixed in 3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1

GHSA-43qq-qw4x-28f8 · CVE-2022-39314 Not analysed yet 18 Oct 2022
CVE-2021-36201 CVE record

CVSS 4.3 Medium

CCURE Observable Response Discrepancy
- Johnson Controls C•CURE 9000
- CWE-204
Not analysed yet 11 Oct 2022
CVE-2022-22520 CVE record

CVSS 5.3 Medium

User enumeration vulnerability in MB connect line and Helmholz products
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- CWE-204
Not analysed yet 14 Sept 2022
CVE-2022-1989 CVE record

CVSS 5.3 Medium

CODESYS Visualization vulnerable to user enumeration
- CODESYS Visualization
- CWE-204
Not analysed yet 23 Aug 2022
CVE-2022-31248 CVE record

CVSS 5.3 Medium

SUMA user enumeration via weak error message
- SUSE Manager Server 4.1
- SUSE Manager Server 4.2
- CWE-204
Not analysed yet 22 Jun 2022
CVE-2022-0564 CVE record

CVSS 5.3 Medium

Qlik Sense Enterprise Domain User enumeration
- Qlik Sense Enterprise on Windows
- CWE-204
Not analysed yet 21 Feb 2022
github.com/goharbor/harbor Go

CVSS 5.3 Medium

Unauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)
- CWE-204
>=1.7.0, <1.10.3 || >=2.0.0, <2.0.1 · fixed in 1.10.3, 2.0.1

GHSA-q9x4-q76f-5h5j · CVE-2019-19030 Not analysed yet 11 Feb 2022
flask-appbuilder PyPI

CVSS 5.3 Medium

Observable Response Discrepancy in Flask-AppBuilder
- Information disclosure
- CWE-204
<3.4.4 · fixed in 3.4.4

GHSA-wfjw-w6pv-8p7f · CVE-2022-21659 Not analysed yet 1 Feb 2022
CVE-2021-20049 CVE record

SonicWall SMA100: A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated…
- SonicWall SMA100
- CWE-204
Not analysed yet 23 Dec 2021
CVE-2021-34580 CVE record

CVSS 7.5 High

Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- CWE-204
Not analysed yet 27 Oct 2021
CVE-2021-38476 CVE record

CVSS 6.5 Medium

InHand Networks IR615 Router
- InHand Networks IR615 Router
- CWE-204
Not analysed yet 19 Oct 2021
pimcore/pimcore Packagist

CVSS 5.3 Medium

Observable Response Discrepancy in Lost Password Service
- Information disclosure
- CWE-204
<10.1.3 · fixed in 10.1.3

GHSA-579x-cjvr-cqj9 · CVE-2021-39189 Not analysed yet 20 Sept 2021
typo3/cms +1 Packagist

CVSS 3.7 Low

Information Disclosure in Password Reset
- Information disclosure
- CWE-204
>=10.0.0, <10.4.2 · fixed in 10.4.2

GHSA-347x-877p-hcwx · CVE-2020-11063 Not analysed yet 13 May 2020
CVE-2016-9499 CVE record

The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.
- Accellion FTP Server
- CWE-204
Not analysed yet 13 Jul 2018