CVE-2021-45901

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists

published February 10, 2022

CVSS
—
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14316 · 96.6th percentile
Published
2022-02-10T13:59Z
EPSS history
Timeline
  • 10 FEB 13:59Z
    The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists
    cvelistv5