Username enumeration in present in Tufin SecureTrack. It's affecting all versions of SecureTrack. The vendor has decided not to fix this vulnerability. Vendor's response: "This attack requires access to the internal network. If an attacker is part of the internal network, they do not require access to TOS to know the usernames".
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
tufin securetrack |
Vulmon