← Database

CVE-2021-44848

MEDIUM CVSS: 5.3 Published: 2021-12-13 Modified: 2026-06-17

Description

In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.

Affected Platforms

Cybelesoft Thinfinity Virtualui

Weakness Type

CWE-203

References