← Back to CVE List
CVE-2021-34580
In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt