CVE-2025-24487

Description

An unauthenticated attacker can infer the existence of usernames in the system by querying an API.

Affected Platforms

Weakness Type

CWE-639

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04