CVE-2022-44023

MEDIUM

5.3

Description

PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts.

CVE Details

CVSS v3.1 Score5.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/30/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

pwndoc_project:pwndoc

Weaknesses (CWE)

CWE-307

References

https://cve.nstsec.com/cve-2022-44023(cve@mitre.org)

https://github.com/pwndoc/pwndoc/issues/382(cve@mitre.org)

https://cve.nstsec.com/cve-2022-44023(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/pwndoc/pwndoc/issues/382(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.