An issue exists in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an malicious user to enumerate valid users.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
reprisesoftware reprise license manager 14.2 |
Vulmon