CVE-2023-3897CWE-203

Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

Medium · published July 25, 2023

CVSS v3.1
4.8
EPSS
3%
Percentile
87.5
In the wild
Unconfirmed
What it is

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

This issue affects SureMDM On-premise: 6.31 and below version

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.03064 · 87.5th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2023-07-25T08:59Z
EPSS history
Timeline
  • 25 JUL 08:59Z
    Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page
    cvelistv5