← Database

CVE-2021-34580

HIGH CVSS: 7.5 Published: 2021-10-27 Modified: 2026-06-17

Description

In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.

Affected Platforms

Mbconnectline Mbconnect24Mbconnectline Mymbconnect24

Weakness Type

CWE-204, CWE-203

References