CVE-2019-7217

EUVD-2019-16761
Citrix ShareFile before 19.12 allows User Enumeration. It is possible to enumerate application username based on different server responses using the request to check the otp code. No authentication is required.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
citrixsharefile
𝑥
< 19.12
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.sk-it.com/en/cve.html
http://www.sk-it.com/en/cve.html