CVE-2021-35060

/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific…

published October 11, 2021

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

/way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00837 · 57.3th percentile
Published
2021-10-11T08:24Z
EPSS history
Timeline
  • 11 OCT 08:24Z
    /way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific…
    cvelistv5