Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ORDAT FOSS-Online 安全漏洞
Vulnerability Description
ORDAT FOSS-Online是ORDAT公司的一个企业资源管理方案。 ORDAT FOSS-Online 2.24.01之前存在安全漏洞，该漏洞源于存在用户枚举漏洞，导致攻击者可以通过比较忘记密码功能的服务器响应来确定应用程序中是否存在帐户。
CVSS Information
N/A
Vulnerability Type
N/A