User Enumeration Vulnerability in PwnDoc by PwnDoc Team
CVE-2022-44023

5.3MEDIUM

Key Information:

Vendor

Pwndoc Project

Status
Pwndoc
Vendor
CVE Published:
30 October 2022

What is CVE-2022-44023?

The PwnDoc product version 0.5.3 is susceptible to a user enumeration vulnerability that enables remote attackers to discern the existence of disabled user accounts. By analyzing the variations in response messages during authentication attempts, an attacker can infer whether a username corresponds to a valid or an invalid account. This type of vulnerability can facilitate further attacks such as password guessing or social engineering.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/pwndoc/pwndoc/issues/382
https://cve.nstsec.com/cve-2022-44023

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.