Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-3897

Published: 25/07/2023 Updated: 19/02/2024
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 0
Subscribe to 42gears

Vulnerability Summary

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows malicious user to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version 

Vulnerable Product Search on Vulmon Subscribe to Product

42gears suremdm

Exploits

Exploit DB: SureMDM On-premise < 6.31 - CAPTCHA Bypass User Enumeration
# Exploit Title: SureMDM On-premise &lt; 631 - CAPTCHA Bypass User Enumeration # Date: 05/12/2023 # Exploit Author: Jonas Benjamin Friedli # Vendor Homepage: www42gearscom/products/mobile-device-management/ # Version: &lt;= 631 # Tested on: 631 # CVE : CVE-2023-3897 import requests import sys def print_help(): print("Usage: pytho ...
Exploit DB: SureMDM On-Premise CAPTCHA Bypass / User Enumeration
SureMDM On-Premise versions prior to 631 suffer from CAPTCHA bypass and user enumeration vulnerabilities ...

References

CWE-203https://www.42gears.com/security-and-compliancehttp://packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.htmlhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/51804
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook