eSitesBuilder Username Enumeration Weakness
BID:45488
Info
eSitesBuilder Username Enumeration Weakness
| Bugtraq ID: | 45488 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2010 12:00AM |
| Updated: | Dec 17 2010 12:00AM |
| Credit: | MustLive |
| Vulnerable: |
eSitesBuilder eSitesBuilder 0 |
| Not Vulnerable: | |
Discussion
eSitesBuilder Username Enumeration Weakness
eSitesBuilder is prone to a username-enumeration weakness because it responds differently to login attempts, depending on whether or not the username exists.
Attackers may exploit this weakness to discern valid usernames, which may aid them in brute-force password cracking or other attacks.
eSitesBuilder is prone to a username-enumeration weakness because it responds differently to login attempts, depending on whether or not the username exists.
Attackers may exploit this weakness to discern valid usernames, which may aid them in brute-force password cracking or other attacks.
Exploit / POC
eSitesBuilder Username Enumeration Weakness
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
eSitesBuilder Username Enumeration Weakness
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].