CVE-2021-44155
An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not…
Published: 2021-12-13 · CVSS: Unscored
An issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts to login, the response if a username is valid includes Login Failed, but does not include this string if the username is invalid. This allows an attacker to enumerate valid users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7