CVE-2022-50800
H3C SSL VPN contains a user enumeration vulnerability that allows attackers to identify valid usernames through the 'txtUsrName' POST parameter. Attackers can submit different usernames to the login_submit.cgi endpoint and analyze response messages to distinguish between existing and non-existing accounts.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-12-30 23:15:47
Güncelleme
2025-12-31 20:42:43
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-