User Enumeration Vulnerability in PHPJabbers Cleaning Business Software
CVE-2023-36141

5.3MEDIUM

Key Information:

Vendor

PHPjabbers

Status
Cleaning Business Software
Vendor
CVE Published:
4 August 2023

What is CVE-2023-36141?

A user enumeration vulnerability exists in PHPJabbers Cleaning Business Software 1.0, potentially exposing user account validity information during the password recovery process. The difference in system messages may allow attackers to discern whether a username is valid, facilitating targeted brute force attacks against existing user accounts.

References

https://www.phpjabbers.com/cleaning-business-software/
https://medium.com/%40bcksec/multiple-vulnerabilities-in-...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.