CVE-2025-6056CWE-203

Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate…

Medium · published July 4, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2025-07-04T11:21Z
EPSS history
Timeline
  • 04 JUL 11:21Z
    Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate…
    cvelistv5