CVE-2013-6043
Summary
| CVE | CVE-2013-6043 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2014-12-27 18:59:00 UTC |
| Updated | 2023-11-07 02:16:00 UTC |
| Description | The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of requests. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Softaculous | Webuzo | 2.1.0 | All | All | All |
| Application | Softaculous | Webuzo | 2.1.1 | All | All | All |
| Application | Softaculous | Webuzo | 2.1.2 | All | All | All |
| Application | Softaculous | Webuzo | 2.1.0 | All | All | All |
| Application | Softaculous | Webuzo | 2.1.1 | All | All | All |
| Application | Softaculous | Webuzo | 2.1.2 | All | All | All |
| Application | Softaculous | Webuzo | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Detica - Securing a Connected World | web.archive.org | ||
| Detica - Securing a Connected World | MISC | web.archive.org | |
| Webuzo 2.1.4 Launched | CONFIRM | www.softaculous.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.